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(54) Integrated information communications system 

(57) An integrated communications system (ICS) 1 has access control apparatuses 2-7, which serve as access 
points for LANs, and an internal address system ADS, the arrangement being such that ICS user frames 80,82, 
having different unique ICS user address systems ADX,ADY, can be converted into ICS network frames 81,83 
using conversion tables in the access control apparatuses 2-7 and transmitted via value added networks 
(VANs), following the rules of the internal address system AOS, to reach destination addresses in networks 
with address systems ADX or AOY. Charging and electronic signatures are possible. 
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INTEGRATED INFORMATION COMMUNICATION SYSTEM 

BACKGROUND OF THE INVENTION 

1. Field of the Invention 

The present invention relates to an integrated information 
communications system integrally connecting information communication 
equipments or information communication systems such as and/or for 
personal computer, LAN (Local Area Network), telephone (including 
portable telephone) , FAX (Facsimile), CATV (Cable Television). 
Internet and the like, not only via dedicated lines, but also via 
ISDN ( Integrated Services Digital Network), FR (Frame Relay). ATM 
(Asynchronous Transfer Mode) , IPX (Integrated Packet Exchange) . 
satellite, wireless and public lines. Here , the integrated* " 
information communication equipment performs communication provided 
with an address (for the information or the communication) for 
distinguishing the integrated information communication equipments 
with other equipments. Particularly, the present invention relates 
to an integrated information communication system which integrates 
data^transfer services based on connect ion- less networks (e.g., IP 
(Internet Protocol) technology used RFC791 or RFC1883) and improves 
the Overall economics of the information communication system by 
employing a unified address system, and ensuring security to realize 
an interactive communication between connected terminals or systems. 

2. Description of the Prior Art 

In accordance with a development of computer and information 
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communication technology, computer communication networks have in 
recent years come to be widely used in universities, research 
institutes, government organizations and intra-corporation/inter- 
corporation situations. LANs are used for intra-corporation 
communication networks, and in the event that the geographic locale 
is on a national basis, the form thereof becomes such as sown in 
FIG.l. In the example described in FIG.l. each local LAN uses a 
common protocol, with each being connected by dedicated lines. Here, 
e.g.. corporation X has LAN-X1. LAN-X2 and LAN-X3 as LANs, 
corporation Y has LAN-Y1. LAN-Y2 and LAN-Y3 as LANs, and both 
corporations X and Y use communication address systems ADX and ADY 
for respectively performing computer communications . Since it is 
necessary to lay a separate dedicated line for each corporation with 
such a LAN network, system architecture becomes costly, and in the 
event that connection is to be made to a LAN network of another 
corporation, interfacing must be matched such as the communication 
address system, making inter-connection very difficult and very 
costly. 

On the other hand, the Internet has recently become 
widespread as a global-scale computer communication network. On the 
Internet, networks are connected using a router of a provider, a 
communication protocol called TCP (Transmission Control Protocol) /IP 
(Internet Protocol) is employed, dedicated lines or FR networks are 
used for connecting remote areas, and Ethernets which are 10 Mbps 
LANs or FDD Is (Fiber Distributed Data Interface) which are 100 Mbps 

2 



BNSDOCIO <GB 23201 67A_I_> 



LANs are used as communication paths within structures. FIG. 2 shows 
an example of an Internet connection, in which the routers in the 
providers maintain mutual connection by exchanging routing-table 
connection information. Each router is connected to a plurality of 
networks, and judgment is made based on the routing-table regarding 
to which router connected to which provider* s network received data 
should go next. Thus, on the Internet, the IP address attached to 
each IP frame (IP datagram) is checked, the judgment is made to which 
router the IP frame should be sent, and that the IP frame is sent 
accordingly. Thus, the IP frames are transferred one after another 
and delivered to a destination computer, by means of all routers 
performing the above-described operation. v---.^ ■ 

FIG. 3 illustrates the information contents of the RFC791 of 
the IP frame used by the Internet, divided into a control field: and a 
data field. FIG. 4 illustrates the information contents of a similar 
RFC1883. also divided into a control field and a data field. In 
either figure, the parentheses () indicate the number of bits. 

However, with the Internet, since the system is such that the 
communication path is not administrated in an integrated manner, one 
cannot tell whether the other party with which communication is being 
made is the authorized party, and there are problems regarding 
security in that information may be eavesdropped. Also, in reality. 
IP addresses within many LANs are being separately decided by the LAN 
users, so there is the necessity to replace the IP address of the LAN 
user to the IP address for the Internet when connecting the LAN to 
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the Internet. Also, communication quality such as communication 
speeds and communication error rates for the trunk lines making up 
the Internet communication path differ from one line to another for 
each LAN, and are practically non-uniform. For example, there are 
problems such as an attempt to send a 10 Mbps TV signal for video- 
conferencing not achieving the desired communication speed. 
Therefore, the Internet cannot be in peace used for the communication 
of the country and the research institute which especially require 
the reliability or for the business of the company. Further, there 
is no administrator for performing maintenance of the network such as 
in the case of failure, of for integrating the overall network for 
future planning for the network and so forth. Also, with LAN 
networks and the Internet, the terminals are personal computers 
(computers), and it has been difficult to user telephones, FAX, CATV 
and so on in an integrated manner therein. 

SUMMARY OF THE INVENTION 
The present invention has been made in accordance with the 
above-described situations, and it is an object of the present 
invention to provide an integrated information communication system 
capable of containing a plurality of VANs which perform 
data/ information transfer by using IP frame of which security and 
reliability in communications has been ensured, by means of not using 
dedicated lines or the Internet so as to improve economic 
considerations of the information communication system architecture, 
and ensuring communication speeds, communication, quality and 
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communication trouble countermeasures in a unified manner. Also, it 
is another object of the present invention to provide an integrated 
information communication system which uses a single information 
transfer which is not dependent on the type of service, such as 
sound, image (motion and still), text, etc., so as to inter-connect 
services which have conventionally been provided separately, such as 
total communication services, analog/digital telephone line services, 
Internet provider services, FAX services, computer data exchange 
services. CATV services and so forth. Further, it is another object 
of the present invention to provide an integrated information 
communication system which enables inter-corporation communication 
with very little change to the computer communication address .....systems 
which have been independently and separately created within each 
separate corporation (including universi ties, research institutes, 
government organizations, etc. ) . 

The present invention relates to an integrated information 
communication system, and the above objects of the present invention 
are realized as follows: the present invention is configured by 
providing an access control apparatus for connecting a plurality of 
computer communication networks or information communication 
equipments to each, and a relay device for networking the 
aforementioned access control apparatus, the system having functions 
for performing routing by transferring the information by a unified 
address system, and is configures such that the aforementioned 
plurality of computer communication networks or information 
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communication equipments can perform communications in an interactive 
manner. 

In FIG.l which is given as an example of a conventional 
arrangement, the range of dedicated lines used for intra-corporation 
and inter-corporation communications is indicated by solid lines, and 
this is replaced with the equivalent of a computer communication 
network according to IP technology as a common communication network 
indicated by broken lines. 

The above-described objects of the present invention are 
achieved by an ICS user frame having a unique ICS user address system 
ADX being converted into an ICS network frame having an address 
system ADS, based on the administration of a conversion table 
provided within an access control apparatus . and by being arranged 
such that in the case that transmission is made over at least one VAN 
contained therein following rules of the aforementioned address 
system ADS, and the destination other access control apparatus is 
reached, conversion is made to the aforementioned ICS user address 
system ADX based on the administration of the aforementioned 
conversion table, and another external information communication 
apparatus is reached. Also, the above-described objects of the 
present invention are achieved by an ICS user frame having a unique 
ICS user address system ADX being converted into an ICS network frame 
corresponding with a reception ICS network address registered 
beforehand to the conversion table in accordance with a user logic 
communication line, rather than using an ICS user address within the 
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aforementioned ICS user frame based on the administration of a 
conversion table provided within the access control apparatus, and by 
being arranged such that in the case that transmission of the 
aforementioned ICS network frame is made to another access control 
device via at least one VAN following rules of the ICS address system 
ADS. the transfer destination of the aforementioned ICS network frame 
being either 1 or N. this is returned to the aforementioned ICS 
network frame based on the administration of a conversion table 
provided within the aforementioned access control apparatus, and 
another external information communication apparatus is reached. 

BRIEF DESCRIPTION OF THE DRAWINGS 

In the accompanying drawings: 

FIG.l is a block diagram for describing conventional. LAN 

networks ; 

FIG. 2 is a diagram illustrating an example of a form of the 
Internet ; 

FIG. 3 is a diagram illustrating an IP frame according to 

RFC791 stipulations; 

FIG. 4 is a diagram illustrating an IP frame according to 

RFD1883 stipulations; 

FIG. 5 is a block diagram systematically illustrating the 

basic principle of the present invention; 

FIG. 6 is a block diagram to show an example of a network 
wherein an ICS according to the present invention is constructed of a 
plurality of VANs; 
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FIG. 7 is a block diagram to show an example of configuring 
the access control apparatus; 

FIG. 8 is a block diagram to show an example of configuring 
the relay apparatus; 

FIG. 9 is a block diagram to show an example of configuring 
the inter-VAN gateway; 

FIG. 10 is a block diagram to show an example of configuring 
the ICS network server; , 

FIG. 11 is an array diagram illustrating an example of the ICS 
user address used in the present invention; 

FIG. 12 is a wiring diagram illustrating the connection 
relation between the ICS logic terminals and the user communication 
lines; 

FIG. 13 is a diagram illustrating the relation between the ICS 
user frame and the ICS network frame which are used in the present 
invention; 

FIG. 14 is a portion of a constructional block diagram to show 
a first embodiment (intra-corporation communication, inter- 
corporation communication) according to the present invention; 

FIG. 15 is a portion of a constructional block diagram to show 
a first embodiment (intra-corporation communication, inter- 
corporation communication) according to the present invention; 

FIG. 16 is a diagram to show an example of the conversion 
table in the access control apparatus; 

FIG. 17 is a diagram to show an example of the temporary 
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conversion table in the access control apparatus; 

FIG. 18 is a flowchart to show an example of operation of the 
access control apparatus; 

FIG. 19 is a flowchart to show an example of operation of the 
access control apparatus in inter-corporation communication; 

FIG. 20 is a constructional block diagram to show a second 
embodiment (virtual dedicated line) according to the present 
invention; 

FIG. 21 is a diagram to show an example of the conversion 
table in the access control apparatus; 

FIG. 22 is a flowchart to show an example of operation of the 
access control apparatus in virtual dedicated line connection; 

FIG. 23 is a constructional block diagram to show a third 
embodiment (ICS network server) according to the present invention; 

FIG. 24 is a diagram to show an example of the conversion 
table in the access control apparatus; 

FIG. 25 is a diagram to show an example of the table in the 

ICS network database; 

FIG. 26 is a flowchart to show an example of operation within 
the ^access control apparatus in virtual ICS network server 
connection: 

FIG. 27 is a constructional block diagram to show a fourth 
embodiment (ICS address administration server) according to the 
present invention; 

FIG. 28 is a diagram to show an example of the conversion 
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table in the access control apparatus; 

FIG. 29 is a diagram to show an example of the correspondence 
table in the ICS address administration server; 

FIG. 30 is a flowchart to show an example of operation of the 
ICS address administration server; 

FIG. 31 is a constructional block drawing illustrating a fifth 
embodiment (ICS name server) according to the present invention; 

FIG. 32 is a diagram to show an example of the conversion 
table in the access control apparatus; 

FIG. 33 is a diagram to show an example of the ICS name 
conversion table in the ICS name server; 

FIG. 34 is a flowchart to show an example of operation of the 
ICS name server; 

FIG. 35 is a portion of a constructional block drawing 
illustrating a eighth embodiment (accounting server) according to the 
present invention; : - . 

FIG. 36 is a portion of a constructional black diagram to show 
an eighth embodiment (accounting server) according to the present 
indention; 

FIG. 37 is a diagram to show an example of the conversion 
table in the access control apparatus; 

FIG. 38 is a diagram to show an example of the fixed charging 
definition table in the accounting server; 

FIG. 39 is a diagram to show an example of the accounting 
information database in the accounting server; 
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FIG. 40 is a flowchart to show an example of operation of the 
charging process; 

FIG. 41 is a portion of a constructional block diagram to show 
a ninth embodiment (ICS frame database server) according to the 
present invention; 

FIG. 42 is a portion of a constructional block diagram to show 
a ninth embodiment (ICS frame database server) according to the 
present invention; 

FIG. 43 is a diagram to show an example of the stored 
information administration table and the Box in the ICS frame 

database server; 

FIG 44 is a diagram to show an example of the stored 
information administration table and the Box in the ICS frame 
database server; 

FIG. 45 is a diagram illustrating an example of an ICS user 
frame used by the ICS frame database server; 

FIG -46 is a flowchart to show an example of operation of the 
communication example 1 of the ICS frame database server; 

"** FIG. 47 is a flowchart to show an example of operation of the 
communication example 2 of the ICS frame database server ; 

FIG. 48 is a flowchart to show an example of operation of the 
communication example 3 of the ICS frame database server; 

FIG. 49 is a portion of a constructional block diagram to show 
a tenth embodiment (transfer by X.25. FR. ATM. satellite 
communication, and containment of telephone line. ISDN line, CATV 
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line, satellite line, IPX frame) according to the present invention; 

FIG. 50 is a portion of a constructional block diagram to show 
a tenth embodiment according to the present invention; 

FIG. 51 is a portion of a constructional block diagram to show 
a tenth embodiment according to the present invention; 

FIG. 52 is a diagram to show an example of the conversion 
table in the access control apparatus; 

FIG. 53 is a diagram illustrating the manner of frame 
conversion of the ICS network frame and the X.25 format; 

FXG.54 is a diagram illustrating the manner of frame 
conversion of the ICS network frame and the FR format; 

FIG. 55 is a diagram illustrating the manner of frame 
conversion of the ICS network frame and the ATM format; 

FIG. 55 is a portion of a constructional block diagram to show 
an eleventh embodiment (transfer by X.25. FR, ATM, satellite 
communication, and containment of telephone line. ISDN line, CATV 
line, satellite line, IPX frame) according to the present invention; 

FIG. 57 is a portion of a constructional block diagram to show 
an 'eleventh embodiment according to the present invention; 

FIG. 58 is a portion of a constructional block diagram to show 
a twelfth embodiment (containment of the access control apparatus 
within the X.25 network and FR network) according to the present 
invention; 

FIG. 59 is a portion of a constructional block diagram to show 
a twelfth embodiment according to the present invention; 
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FIG. 60 is a portion of a constructional block diagram to show 
a thirteenth embodiment (the access control apparatus connected with 
the relay network) according to the present invention; 

FIG. 61 is a portion of a constructional block diagram to show 
a fourteenth embodiment (provision of access control apparatuses 
outside of the ICS) according to the present invention; 

FIG. 62 is a portion of a construction block diagram to show a 
fifteenth embodiment according to the present invention; 

FIG. 63 is a portion of a construction block diagram to show a 
fifteenth embodiment according to the present invention; 

FIG. 64 is a portion of a construction block diagram to show a 
fifteenth embodiment according to the present invention; 

FIG. 65 is a diagram to show an example of the conversion 
table in the access control apparatus; 

FIG. 66 is a diagram illustrating an example of the table to 
define the relation between the communication speed and the speed 
class; 

FIG. 67 is a flowchart to show an example of operation of the 
fifteenth embodiment; 

FIG. 68 is a flowchart to show an example of operation of the 

fifteenth embodiment; 

FIG. 69 is a diagram to show the ICS user frame after the 
electronic signature assignment; 

FIG. 70 is a diagram to show the ICS user frame before the 
electronic signature assignment; 
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FIG. 71 is a construction block diagram to show a sixteenth 
embodiment according to the present invention; 

FIG. 72 is a diagram to show an example of the conversion 
table in the access control apparatus; 

FIG. 73 is a flowchart to show an example of operation of the 
sixteenth embodiment; 

FIG. 74 is a diagram to explain the electronic signature at 
sending and receiving times; 

FIG. 75 is a construction block diagram to show a seventeenth 
embodiment according to the present invention; 

FIG. 76 is a construction block diagram to show a eighteenth 
embodiment according to the present invention; 

FIG. 77 is a diagram to show an example of the conversion 
table in the access control apparatus; 

FIG. 78 is a diagram to show an example of the conversion 
table original in'the ICS conversion table server; 

FIG. 79 is a diagram to show an example of the correspondence 
table in the ICS address administration server; 

' FIG. 80 is a diagram to show an example of the ICS name 

convert ion table in the ICS name server; 

FIG. 81 is a construction block diagram to show a nineteenth 
embodiment according to the present invention; 

FIG. 82 is a diagram to show an example of the intensive 
conversion table in the intensive access control apparatus; 

FIG. 83 is a diagram to show an example of the simple 
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conversion table in the simple access control apparatus; and 

FIG. 84 is a flowchart to show an operation of the nineteenth 
embodiment . 

DESCRIPTION OF THE PREFERRED EMBODIMENTS 
FIG. 5 systematically illustrates the basic principle of the 
present invention, wherein an integrated information communication 
system (hereafter referred to as "ICS") 1 according to the present 
invention has self-appointed address providing rules as a computer 
informat ion/communication address, i.e.. the system has a unique 
address system ADS. and has access control apparatuses (2 through 7 
in the present example) which serve as access points for connecting a 
plurality of computer communication networks or information • 
communication equipment, e.g.. a great number of LANs (in the present 
example, corporation X s LAN-X1 . LAN-X2 and LAN-X3. arid corporation 
Y s LAN-Y1 . LAN-Y2 and LAN-Y3) . Here, the corporation X" s LAN-X1, 
LAN-X2 and LAN-X3 have the same address system ADX. and the 
corporation Y" s LAN-Y1. LAN-Y2 and LAN-Y3 have the same address 
system ADY. The access control apparatuses 2. 3 and 4 have 
conversion tables for administrating mutual conversion between the 
address system ADS and the address system ADX. The access control 
apparatuses 5. 6 and 7 have conversion tables for administrating 
mutual conversion between the address system ADS and the address 
system ADY. The computer communication data (ICS frame) within the 
ICS 1 uses addresses according to the address system ADS of the ICS 
1. and performs the communication according to IP frame which is used 
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on the Internet . 

Now, description will be made regarding the operation in the 
case of communication within a single corporation. The computer 
communication data (ICS frame) 80 transmitted from the LAN-X1 of a 
corporation X is provided with addressing following the address 
system ADX, but is subjected to address conversion following the 
address system ADS under administration of the conversion table of 
the access control apparatus within ICS 1. and becomes ICS frame 81. 
This is then sent within the ICS 1 under the rules of the address 
system ADS. and upon reaching the destination access control 
apparatus 4. is restored to the computer communication data 80 of the 
address system ADX under the administration of the conversion table 
thereof, and is sent to the LAN-X3 within the same corporation X. 
Here, the ICS frame being sent and received within the ICS 1 is 
referred to as an "ICS network frame", and the ICS frame being sent 
and received outside of the ICS 1 is referred to as an "ICS user 
frame" . The form of the ICS user frame is stipulated by a form 
defined by RFC791 or RFC1883 as a rule used in the Internet, but 
dealing with ICS frames which do not follow the above rule will be 
described later in conjunction with description of another 
embodiment . 

The ICS network frame 81 is comprised of a network control 
field 81-1 and a network data field 81-2, with the network control 
field 81-1 storing the addresses (address system ADS) of the access 
control apparatuses 2 and 4 therein. The ICS user frame is either 

1 6 



BNSOOC1D: <GB 23201 67A_I_> 



used as the network data field 81-2 with no change to the data value 
thereof, or is subjected to data format conversion under the 
stipulations determined within the ICS 1 and is used as network data 
field 81-2. An example of the data format conversion stipulations 
might be conversion to ciphertext or data compression, and the access 
control apparatus 2 may be provided with ciphering means, deciphering 
means for returning the ciphertext to the original plain-text (ICS 
user frame), data compression means, and data decompression means for 
returning the compressed data to the original data. In the access 
control apparatus 2. the ICS user frame 80 is used as the ICS network 
frame 81-2. and the operation of adding the network control field 81- 
1 to the ICS network frame 81-2 is referred to as "ICS encapsula- 
tion"- Also, in the access control apparatus 4, the operation of 
removing the network control field 81-1 from the ICS network frame 81 
is referred to as "ICS reverse encapsulation". 

Now. description will be made regarding the operation in the 
case of communication between different corporations. The computer 
communication data (ICS user frame) 82 transmitted from the LAN-Y2 of 
a tftrporation Y is provided with addressing following the address 
system ADY. but is subjected to address conversion following the 
address system ADS under administration of the conversion table of 
the access control apparatus 6 within ICS 1. and becomes ICS frame 
83. This is then sent within the ICS 1 in accordance with the rules 
of the address system ADS. and upon reaching the destination access 
control apparatus 3. is converted to the computer communication data 
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82 of the address system ADX under the administration of the 
conversion table thereof, and is sent to the LAN-X2 within the 
corporation X. While address lengths of 32 bits and 128 bits are 
used in the present invention, the present invention is by no means 
restricted to these. Even if the length of the address is changed to 
such other than 32-bit or 128-bit. this does not change the principle 
of address conversion which is the principle idea of the present 
invention. 

Thus, according to the present invention, both intra- 
corporation and inter-corporation computer communications are enabled 
by unified address administration by the ICS 1. Generally used user 
terminals for computer communications are incorporated within the LAN 
within the structure of the> user, and incorporated within the VAN 
(Value Added Network) via access lines, and user data frames are sent 
which have differing data formats and differing address system for 
each type of service. For example, an IP address is used for 
Internet services, a telephone number/ISDN number (E.164 address) for 
telephone services, and an X.121 address is used for X.25 packet 
services. Conversely, according to the ICS 1 of the present 
invention, address conversion (referred to as "ICS address 
conversion") is performed with the conversion table of the access 
control apparatus based on the inputted ICS user frame, thus 
realizing sending of information frames of data of varied structures 
unified under a single data format and address system, i.e., 
converted to ICS frames. 
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FIG. 6 schematically illustrates an example wherein the ICS 1 
of the present invention is comprised of a plurality of VANs (VAN-1. 
VAN-2, VAN-3) . with each VAN being administered by a VAN operator. 
An ICS 1 user applies to the VAN operator for a user communication 
line, and the VAN operator decides an ICS address, an ICS network 
address and the like for the user and registers these informations 
with a circuit type in a conversion table 12 within the access 
control apparatus 10 such as shown in FIG.7. The ICS 1 has as access 
points serving as external connection elements with the LANs (or 
terminals thereof) of the corporations X and Y the access control 
apparatuses 10-1. 10-2, 10-3. 10-4 and 10-5. arid further has relay 
apparatuses 20-1. 20-2. 20-3 and 20-4. and also ICS network servers 
40-1. 40-2. 40-3. 40-4 and 40-5. as well as ICS address administra- 
tion servers 50-1 and 50-2. A relay apparatus 20 such as shown in 
FIG. 8 is provided to the communication path within each of the VANs. 
and an inter-VAN gateway 30 such as illustrated in FIG. 9 is provided 
as a connection element of the VAN-2 and the VAN-3. The LANs 1-1. 1- 
2, 1-3 and 1-4 shown in FIG. 6 are respectively connected to the 
access control apparatuses 10-1. 10-5. 10-4 and 10-2. via the user 
communication lines 36-1. 36-2. 36-3 and 36-4. 

The access control apparatus 10 (10-1. 10-2. 10-3. 10-4 and 
10-5) are devices containing the user communication lines from the 
user (corporations X and Y) to the ICS 1. and as shown in FIG.7. is 
comprised of a processing device 11 comprised of a CPU and so on. a 
conversion table 12 serving as a database for performing address 
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conversion and the like, a line portion 13 of an input/output 
interface, and a temporary conversion table 14. Also, the relay 
apparatus 20 has a transferring function of an ICS network frame and 
a routing function of path designating, and as shown in FIG. 8 has a 
processing device 21 comprised of a CPU and so on and a relay table 
22. the relay table 22 being used for determining the communication 
destination when the ICS network frame is transferred within the ICS 
1 . The inter-VAN gateway 30 has a processing device 31 comprised of 
a CPU and so on and a relay table 32 for determining where to send 
the ICS network frames between the VANs, as shown in FIG. 9. 

As shown in FIG. 10. the ICS network server 40 is comprised of 
a processing device 41 and an ICS network database 42, the usage of 
the ICS network database 42 being various. Examples of the usage 
include: user-specific data (such as the name or address of the user) 
corresponding with the ICS user address, data not corresponding with 
the ICS user address, such as data indicating the state of 
communication trouble within the VAN, or data not directly related to 
the VAN, such as an electronic library which maintains and discloses 
digital documents, public keys for a public encryption system using 
encryption technology employed in verifying the authenticity of the 
transmitter and receiver, and maintaining data such as public key 
proof data or secret keys for a secret encryption system. The 
processing device 41 refers to the ICS network database 42, and 
obtains corresponding data and transmits the data to the access 
control apparatus 10. Further, not only does the ICS network 

2 0 

BNSDOC1D: <GB 2320 167 A l_> 



database 42 operate in stand-alone manner, but also is capable of 
communicating with other ICS network servers and obtaining data 
therefrom, by means of transmitting and receiving the ICS network 
frames based on IP communication technology. Within the ICS. the ICS 
network server is the only component provided with a single ICS 

network address. 

According to the present invention, the address used to 
identify computers, terminals and the like used within the ICS 
network frame is referred to as an "ICS network address", and the 
address used to identify computers, terminals and the like used 
within the ICS user frame is referred to as an "ICS user address". 
The ICS network address is used only within the ICS. one or both of 
the two types being used; 32-bit length and/or 128-tiit length. 
Similarly, the ICS user address also uses one or both of the two 
types; 32-bit length and/or 128-bit length. The ICS logic terminal 
within the access control apparatus 10. the relay apparatus 20. the 
inter-VAN gateway 30 and the ICS network server are arranged so as to 
be provided each with an ICS network address so as to be uniquely 
identified. Also, the ICS user address is formed of a VAN upper code 
and 'a VAN internal code. With the length of the VAN upper code being 
represented as CI bits and the length of the VAN internal code being 
represented as C2 bits, the ICS user address is used such that the 
total of CI + C2 equals either 32 bits or 128 bits. 

In the present invention, no particular method for deciding 
the VAN upper code and the VAN internal code is stipulated, but in 
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the case of CI + C2 = 32 bits, the following example can be given for 
a method for deciding such: 

VAN upper code = district administration code (4 bits) 1 
country code (4 bits) 11 VAN code (8 bits) 

VAN internal code - VAN district code (4 bits) J VAN access 
point code (8 bits) I user logic code (4 bits) 

FIG. 11 makes description thereof using an example of an ICS 
user address. Here, the symbol "a 8 b" indicates linkage of data "a" 
and "b". i.e.. data obtained by means of arrayed data "a" and "b w in 
this order. The ICS network address can be provided with locality in 
the same manner as with the user network address, i.e.. 

ICS network address = district administration code i country 
code I VAN code I VAN district code I user logic 
communications line code 

Thus, the relay apparatus can efficiently find the transfer 
destination by means of deciding the transferring destination with 
consideration to the district. The address can be determined in the 
same way in the case of CI + C2 = 128 bits, as well. Incidentally, 
with the present invention, the ICS frame can be constructed as 
described later, as long as Cl + C2 - 32 bits or CI + C2 = 128 bits 
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is kept, regardless of how the field sections for the VAN upper code 
and the VAN internal code are made, or the length of each of the 
sections. Also, when deciding the VAN upper code and the VAN 
internal code, part of these codes may be made to be unique to the 
user. That is, the user can make a user-specific address system. 
The address values of a 32 bit expression value are from address 0 to 
address (2 32 -l) . the present invention is carried out by providing 
an address decided uniquely to the user within the range of address 
10 x 2 2 * to address (10 x 2 2 *+2 2 *-l) . or address (172 x 2 2 *+ 16 x 2 1S ) 
to address (172 x 2 2 «+ 32 x 2"-l) or address (192 x 2 2 «+ 168 x 2") 
to address (192 x 2 2 *+ 169 x 2 16 -1) . 

A physical communication line can be separated into a 
plurality of communication lines and used, this being realized in 
conventional art as a multiplex communication method by frame relay 
(FR) . for example. According to the present invention, the user's 
communication line is separated into a user physical communication 
line and one or more user logic communication lines. FIG. 12 
illustrates an example of this aspect . wherein a user physical 
communication line 60 is separated into two user logic communication 
lines 61-1 and 61-2. Also, separated computer communication 
apparatuses 62-1. 62-2. 62-3 and 62-4 are each connected to 
respective user logic communication lines, and the ICS user addresses 
"4123. 0025. 0026. 4124" are assigned to each of the computer 
communication apparatuses 62-1 through 62-4. The user physical 
communication line 60 is connected to the access control apparatus 
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63, and the point of contact between the two is called "ICS logic 
terminal". The ICS logic terminal is provided with an only ICS 
network address within the ICS. In the example shown in FIG. 12, the 
user logic communication lines 61-1 and 61-2 are connected to the 
access control apparatus 63. and ICS network addresses 44 8710" and 
-8711° are assigned to the ICS logic terminals 64-1 and 64-2 of the 
contact points, respectively. 

As described above, the ICS network server 40 is also . 
provided with an only ICS network address, so that the ICS network 
address can determine that the ICS logic terminal or the ICS network 
server is the only one within the ICS. The ICS network server is 
capable of exchanging information with other ICS network servers by 
means of transmitting and receiving the ICS network frames provided 
with each other' s ICS network addresses, using IP communication 
technology. This function is referred to as a "ICS network server 
communication function" . The access control apparatus is also 
provided with an only ICS network address within the ICS, and is 
capable of exchanging information with other ICS servers by means of 
a communication function of the ICS network server. The ICS network 
servpr communication function can be realized by TCP or UDP (User 
Datagram Protocol) of a conventional technology. 

There are two types of the ICS frames in the present 
invention, as described above, the ICS network frame which is 
transmitted and received within the ICS. and the ICS user frame 
which is transmitted and received outside of the ICS. Each ICS 
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network frame is comprised of a control field and a network data 
field (ICS user frame), and, as shown in FIG. 13. the network control 
field is comprised of a besic field and an expansion field, and the 
network data field is comprised of a user control field and user data 
field, so as to allow usage by ICS encapsulation or ICS reverse 
encapsulation. That is. when the ICS user frame enters the ICS from 
the access control apparatus, the ICS user frame becomes a data field 
of the ICS network frame, and the control field (network control 
field) of the ICS network frame is added thereto (ICS encapsulation) . 
The expansion field in the network control field is used for the 
cipher or the like! In a case that the cipher is useless, the 
expansion field is not used. -y^^r^x 

Inside the network control field of the ICS frame is placed 
an area for storing the transmitter' s address and intended receiver' s 
address. There are two types of the ICS frames, those with a 32-bit 
address length and those with a 128-bit address length, and a frame 
format with 32-bit address length being employed according to the 
RFC791 stipulations shown in FIG. 3, for example. In the event that 
32*6*1 ts is insufficient for the ICS network address, for example, in 
the 4 event that a 64-bit address is to be used, following the RFC791 
stipulations, the lacking 32 bits (64 bits - 32 bits) are written 
into an option field or the expansion field in the network control 
field of the ICS network frame control field, thus making the network 
address usable at 64 bits. Now. supplemental description will be 
made regarding the aforementioned user-specific address. In the 
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event that a great number of users have a private address (a type of 
ICS user address) in the section between an address (10 x 2 2 *) and an 
address (10 x 2 24 + 2 2 * - 1) for example, in the case that the length 
of the ICS user address is 32 bits, the 32 bits is insufficient for 
the ICS network address, since the ICS network address is assigned 
corresponding to the ICS user address, and 64 bits is required, for 
example- In this case, as described above, the lacking 32 bits are 
written into the option field of the ICS network frame control field, 
thus making the network address usable at 64 bits. The fact that 
communication between the same user (called "intra-corporation 
communications ") is possible using a private address will be 
described in the first embodiment. Also, in the event that the 
address length is 128 bits, the present embodiment is carried out 
tinder the frame format according to the RFC1883 stipulations such as 
shown in FIG. 4, for example. The originating address area within the 
network control field and the address stored in the destination 
address area are made to be ICS network addresses, each respectively 
being the transmitting ICS network address and the receiving ICS 
netggrk address. Further, the originating address area within the 
user t control field and the address stored in the destination address 
area are made to be ICS user addresses, each respectively being the 
sending ICS user address and the receiving ICS user address. 

Incidentally, there is no need to following the RFC791 or 
RFC1883 stipulations for the ICS frame format in carrying out the 
present invention; the present invention can be carried out as long 
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as the frame format is such that uses addresses of 32 bits or 128 
bits in length. Generally, the ICS receives the ICS user frame 
stipulated by RFC791 or RFC1883. but other frame formats can be 
handles within the ICS network by converting to ICS user frame with a 
conversion means (or changing portion) . 

Embodiment-1 (Basic ICS. intra-corporation communication and inter- 
corporation communication): 

A first embodiment of the present invention will be described 
with reference to FIGs.14 and 15. regarding a basic communication 
wherein the transfer destination within the ICS is determined from 
the receiver ICS user address, based on administration by a 
conversion table. In the figures. 170-1. 170-2. 170-3 and 170-4 
respectively denote gateways provided within the LANs 100-1. 100-2. 
100-3 and 100-4. and the ICS frames can pass through these gateways 
170-1 through 170-4. FIG. 16 shows an example of a conversion table 
113-1 in the access control apparatus 111-1 and FIG. 17 does the same 
of a temporary conversion table 114-2 in the access control 

apparatus 110-4. 

First, description will be made regarding communication 
between a terminal which is connected to a LAN 100-1 of the 
corporation X which has a unique address system ADX. and a terminal 
which is connected to a LAN 100-2 of the same corporation X. That 
is. this is a communication between a terminal which has an ICS user 
address "0012- on the LAN 100-1 and a terminal which has an ICS user 
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address "0034" on the LAN 100-2. This communication is a typical 
communication made between terminals which have set addresses based 
on a unique address system within a single corporation (ADX in this 
example), the communication being made via the ICS 100 in an 
interactive manner. This type of communication is referred to as 
intra-corporation communication service (or intra-corporation 
communication). Next, description will be made regarding a 
communication between a terminal which is connected to a LAN 100-1 of 
the corporation X which has a unique address system ADX and a 
terminal which is connected to a LAN 100-3 of the corporation Y which 
has a unique address system ADY. That is, this is a communication 
between a terminal which has an ICS user address "OO^" on the LAN 
100-1 and a terminal which has an ICS user address "1156" on the LAN 
100—3- This communication is a typical communication made between 
terminals which have different address systems within different 
corporations, the communication being made using an ICS address 
system which can be shared between the two. This type of 
communication is referred to as inter-corporation communication 
secjy.ce (or inter-corporation communication) . 
«Cqmmon preparation» 

In describing the present embodiment, the address format and 
so forth is determined as described below, but the specific numeric 
values and formats are all but an example, and the present invention 
is by no means limited to these. The ICS network address is 
represented by a 4-digit number, and the sender ICS user address and 
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the receiver ICS user address are both represented by a 4-digit 
number. Of the sender ICS user address and the receiver ICS user 
address, addresses of which the upper two digits are not "00" are 
used as an inter-corporation communication address, and this inter- 
corporation communication address is an only value within the ICS 
100. Of the sender ICS user address and the receiver ICS user 
address, addresses of which the upper two digits are "00" are used as 
an intra-corporation communication address, and this intra- 
corporation communication address may be duplicate of other intra- 
corporation communication address within the ICS 100. Also, the 
conversion table 113-1 in FIG. 16 provided to the access control., 
apparatus 110-1 contains the following: transmitting ICS network 
addresses/ receiving ICS network addresses, sender ICS network 
addresses, receiver ICS network addresses, request identification 
(ID), speed segments and so forth. The request identification 
registered to the conversion table 113-1 is such that. e.g.. M l" 
represents the intra-corporation communication service. "2 " 
represents the inter-corporation communication service, and "3" 
represents a virtual dedicated line connection (which will be 
desdrived hereinafter) . The speed segment is the line speed that the 
communication from the ICS network address requires, including 
throughput (e.g.. the number of ICS frames sent within a 
predetermined time) . 

«Preparation for intra-corporation communication» 

The users of the LAN 100-1 and the LAN 100-2 specffy the 
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terminals and apply to the VAN operator in order that the intra- 
corporation communication of the terminals connected to the LANs can 
perform the communi cation via the VAN-1 and VAN-3. The VAN operator 
responds to the application and sets the aforementioned ICS network 
address. ICS user address, requested identification, etc. to the 
conversion tables of the access control apparatuses 110-1 and 110-5 
connected to the LAN 100-1 and LAN 100-2, and further writes and 
holds them in the ICS address administration server 150-1. 

The items to be set for the VAN-1 are as follows. The ICS 
network address is decided by the ICS logic terminal of the access 
control apparatus 110-1 to which the LAN 100-1 is connected, with the 
ICS network address* of the ICS logic terminal in this case being set 
as "7711" . The intra-corporation communication address of the 
terminal connected to the LAN 4-00-1 from which the application was 
made is set as "0012". and this is used as the sender ICS user 
address. The intra-corporation communication address used by the 
terminal of the above address is set as "2212", and this is used as 
the sender ICS user address. Next, the intra-corporation 
comjsa*5iication address of the terminal connected to the LAN 100-2 from 
which the application was made is decided by the ICS logic terminal 
of the access control apparatus 110-5 to which the LAN 100-2 is 
connected, in this case the ICS network address being set as "9922". 
and this is used as the receiving ICS network address. Further, the 
ICS user address used by the terminal connected to the LAN 100-2 is 
set as "0034", and this is used as the receiver ICS user address. 
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The number "1" is set as the request identification, indicating the 
intra-corporation communication service that was applied for, and the 
above is registered to the conversion table 113-1 in FIG. 16. 

The items to be set for the VAN-3 are as follows. Values 
necessary for reverse communication (communication from the LAN 100-2 
to the LAN-1) are set to the conversion table of the access control 
apparatus 110-5 connecting the LAN 100-2 from which application was 
made. That is. data is set reverse to the transmitting ICS network 
address and the receiving ICS network address, and at the same time, 
data is set reverse to the sender ICS user address and the receiver 
ICS user address . The ICS network address of the LAN 100-2 is set as 
"9922". and this is used as the transmitting ICS network address . 
The address "0034" is set as the sender ICS user address for the 
intra-corporation ICS user address of the terminal connected to the 
LAN 100-2. and the ICS user address "0012" of the terminal of the 
other party is used as the receiver ICS user address. Also, the ICS 
user address "7711" of the LAN 100-1 is used as the receiving ICS 
network address and the value "1" is set as the request 
identification, indicating the intra-corporation communication 
services. The above is written to the conversion table in the access 
control apparatus 110-5 and registered. 
«Operation of intra-corporation communication» 

The terminal having an ICS user address "0012" sends an ICS 
user frame PI to the receiver "0034". This ICS user frame PI has set 
as the sender ICS user address "0012". and as the receiver ICS user 
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address has set 14 0034". 

The operation will be explained with reference to FIG. 18. 
The ICS user frame PI is sent to the access control apparatus 110-1 
via the logic communication line 180-1. The access control apparatus 
110-1 refers to the conversion table 113-1 of FIG. 16 from the 
transmitting ICS network address ' "7711 " (Steps S100 and S101) and the 
receiver ICS user address "0034 "of the received ICS user frame, it 
knows that the communication is the intra-corporation communication 
due to the value "l w of the request identification (Step S102) . The 
access control apparatus 110-1 obtains that the receiving ICS network 
address corresponding to the receiver ICS user address "0034" is 
"9922 ". and then it is ICS-encapsulized (Step S106) . The above 
procedures illustrated in a flowchart are as shown in FIG. 18, with 
the intra-corporation being flow (1) therein. The sender ICS user 
address may be used to specify the transmitted original of the ICS 
frame. 

The access control apparatus 110-1 sends the ICS network 
frame P2 to the relay apparatus 120-1 by the ICS encapsulation. 
Sines, the network address of the network control field is ensured of 
its uniqueness within the ICS. there is no conflict with other ICS 
frames. The ICS network frame F2 passes through the relay apparatus 
120-1 and 120-2 based on the receiving ICS network address, and 
reaches the access control apparatus 110-5 of the VAN-3. The access 
control apparatus 110-5 removes the network control field from the 
ICS network frame P4 and performs the ICS reverse encapsulation, and 

3 2 

BNSOOC1D: <G8 23201 67 A_l_> 



re-creates an ICS user frame P5 which is the same as the ICS user 
frame PI from the network data field of the ICS frame, and sends it 
to the LAN 100-2 . The ICS user frame is routed through the LAN 100- 
2. and is transferred to the terminal which has the ICS user address 
-0034- . 

<<Preparation for inter-corporation communication» 

As an example of performing the inter-corporation 
communication, a communication between a terminal which has an ICS 
user address "0012" and is connected to a LAN 100-1 under the address 
system ADX, and a terminal which has an ICS user address "lise* and 
is connected to a LAN 100-3 under the address system ADY, will be 
described! the users of the LANs 100-1 and 100-3 specify the 
terminal to the VAN each is connected to so as to be able to perform 
the communication via VAN-1 and VAN-2. and make application to the 
VAN operator. The VAN operator sets the necessary items in the 
conversion table of the access control apparatus which is connected 
to the LANs 100-1 and 100-3, in accordance with the application. 

The items to be set regarding the VAN-1 are as follows. The 
ICS^network address of the LAN 100-1 is made to be "7711", the intra- 
corporation communication address held by the terminal connected to 
the LAN 100-1 from which there was application is made to be "0012", 
and this is made to be the sender ICS user address. The inter- 
corporation communication address provided to the terminal of the 
above ICS user address is made to be "2212", and this is made to be 
the sender ICS user address (inter-corporation) . The ICS network 
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address is determined by the ICS logic terminal of the access control 
apparatus 110-4 connected to the ICS network address of the LAN 100-3 
from which there was application, the ICS network address here being 
"8822". and this is made to be the receiving ICS network address. 
Also, the ICS user address of a terminal connected to the LAN 100-3 
is made to be "1156 w . and this is made to be the receiver ICS user 
address. Further, number "2" is set as the request identification, 
indicating the inter-corporation communication service that was 
applied for, and the above is registered to the conversion table 113- 
1. 

The items to be set regarding the VAN-2 are as follows. As a 
conversion table for the access control apparatus 110-4 to which the 
LAN 100-3 is connected, a temporary conversion table 114-2 which 
holds reverse data for a certain time, e.g. , 24 hours, is set. That 
is. regarding the ICS network address "8822" to which is connected 
the LAN 100-3 which uses the inter-corporation communication service, 
the following are provided within the access control apparatus 110-4: 
a temporary conversion table 114-2 which includes a transmitting ICS 
netsaork address, sender ICS user address, receiver ICS user address, 
receiving ICS network address, request identification and so forth. 
The setting of the temporary conversion table will be explained 
hereinafter . 

«Operation of inter-corporation communication» 

The terminal having an ICS user address "0012" transmits the 
ICS user frame Fl in which the sender ICS user address "0012" and the 
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receiver ICS user address "1156" are set. The ICS user frame Fl is 
transferred to the access control apparatus 110-1 via the user logic 
communications line 180-1. 

The access control apparatus 110-1 refers to the conversion 
table 113-1 from the transmitting ICS network address "7711" (Steps 
S100 and S101) and the receiver ICS user address "1156". it knows 
that the request identification is "2". that is. the communication is 
the inter-corporation communication (Step S102). Next, the access 
control apparatus 110-1 obtains that the receiving ICS network 
address corresponding to the receiver user address "1156" is. "8822" 
(Step S104) . and then converts the sender ICS user address "0012" 
into an inter^corporation communication user address "2212" (Step 
S105) . The access control apparatus 110-1 performs the ICS, v , 
encapsulation by adding a network control field as the transmitting 
ICS network address "7711". the sender ICS user address "2212", the 
receiver ICS user address "1156" and the receiving ICS network 
address "8822". and sends it to the relay apparatus 120-1 as the ICS 
network frame F2 (Step S106) . The above procedures illustrated in a 
flowchart are as shown in FIG. 18. with the inter-corporation 
communication being flow (2) therein. 

In the above inter-corporation communication, in the event 
that the sender ICS user address within the ICS user frame Fl is made 
to be the inter-corporation communication address "2212". the sender 
and receiver perform the inter-corporation communication using an 
inter-corporation communication address (Steps S102 and S104) . In 
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this case, the access control apparatus 110-1 does not perform the 
process of converting the sender ICS user address 44 2212" into the 
inter-corporation communication address M 2212". as such is not 
necessary. The above procedures are illustrated in a flowchart shown 
in FIG. 18. with the inter-corporation communication as flow (3). The 
sender ICS user address may be used to specify the transmitted 
original of the ICS frame. 

The relay apparatus 120-1 transfers the ICS network frame to 
the access control apparatus 110-4 within the VAN- 2 via the relay 
apparatus 120-2 within the VAN-1. the inter-VAN gateway 130, and the 
relay apparatus 120-3 within the VAN-2, based on the receiving ICS 
network address. It will be described with reference to FIG. 19. The 
access control apparatus 110-4 receives the ICS network frame (Step 
S110), forms an ICS user frame F5 from the network data field (Step 
Sill: ICS reverse encapsulation), decides from the receiving ICS 
network address the ICS logic terminal for sending ((1) in Step 
S112), and sends to the LAN 100-3 (Step S113) . At the same time, in 
the event that the relation among the transmitting ICS network 
address -7711". the sender ICS user address "2212". the receiver ICS 
user, address "1156" and the receiving ICS network address "8822" is 
not registered in the conversion table within the access control 
apparatus 110-4. a temporary conversion table 114-2 is compiled ((2) 
in Step S112) . The registration contents of the temporary conversion 
table 114-2 are updated according to a process such as the contents 
being deleted if there is no usage thereof for 24 hours. The ICS use 
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frame is routed through the LAN 100-3. and is transferred to the 
terminal having the ICS user address "lise". 

In this embodiment, it is not set in the temporary conversion 
table 114-2. In another embodiment of this, the conversion table 113- 
1 does not include the sender ICS user address (intra-corporation) 
and the sender ICS user address (inter-corporation), and further does 
not contain the flowchart (2) in FIG. 18. i.e.. Step S105. A merit of 
this embodiment is that the register number to the conversion table 
can be reduced to one of the sender ICS user address if there are the 
sender ICS user address for one of the receiver ICS user address. 



Embodiment-2 (Virtual dedicated line) : • 

Now. description of the operation of virtual dedicated line 
connection according to the present invention will be made with 
reference to FIG. 20. Here, the virtual dedicated line connection 
refers to communication wherein the ICS user frame is transferred in 
a fixed manner to a receiving ICS network address already registered 
in the conversion table, regardless of the ICS user address within 
ttwftiser control field of the ICS user frame, in which the format 
taken is one-on-one or one-on-N. While the components of FIG. 20 are 
the same as those of Embodiment-1 shown in FIGs.14 and 15. what is 
different is the contents of registration in the conversion table 
shown in FIG. 21. In the conversion table of the access control 
apparatus, the receiving ICS network address is determined from the 
transmitting ICS network address in a fixed manner, so that either 
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the sender ICS user address (intra-corporation) , the sender ICS user 
address (inter-corporation) and the receiver ICS user address are 
either not registered, or ignored if registered. 

Description will now be given regarding a case in which the 
corporation X uses virtual dedicated line connection, and the 
communication is conducted between the LAN 200-1 of the corporation X 
which is connected to the access control apparatus 210-1, and the LAN 
200-2 of the corporation X which is connected to the access control 
apparatus 210-5 . 
«Preparation» 

The user applies to the VAN operator for the virtual 
dedicated line connection. The VAN operator determines the ICS 
network address "7711" of the ICS logic terminal at the connection 
point between the access control apparatus 210-1 for connecting the 
LAN 200-1 of the corporation X and the user logic communications line 
240-1, and similarly determines the ICS network address "9922" of the 
ICS logic terminal at the connection point between the access control 
apparatus 210-5 for connecting the LAN 200-2 of the corporation X and 
the^suser logic communications line 240-2. Next, the VAN operator 
performs setting to the conversion table 213-1 of the access control 
apparatus 210-1 of the following: the transmitting ICS network 
address "7711", the receiving ICS network address "9922" and the 
request identification. Illustrated in FIG. 21 is an example wherein 
the request identification "3" has been made to serve as the virtual 
dedicated line connection. Similarly, the VAN operator performs 
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is used to request the questioned ICS user address from another ICS 
name server which has the ICS user address, and the ICS user address 
obtained therefrom is sent to the access control apparatus 510-1. 

Now, description will be made the method whereby the terminal 
of the sender ICS user address "0012" connected to the LAN 500-1 
obtains an ICS user address corresponding to the ICS name #1 "USRtl. 
ACS#1.DIS#1.VAN#1. JP.AS". Here, two cases will be described: that 
wherein the access control apparatus 510-1 obtains data from the ICS 
name server 550. and that wherein the access control apparatus 510-1 
obtains data from another ICS name server 560. 

First, in preparation, an ICS network address "7741" 
corresponding to the ICS user address "1000" of the ICS name server 
550. and a request identification "4" thereof are registered in the 
conversion table 513-1 of the access control apparatus 510-1. Here, 
the request number "4" indicates that as the ICS user address "1000" 
is the telephone number "119". it is a special ICS number to be 
common to another user. The receiver ICS user address "2014" 
corresponding to the ICS name "USR#1 .ACS#1 .DIS#1 -VAN#1 . JP.AS" is 
registered in the ICS name conversion table 552 of the ICS name 
server 550. Then, the terminal user of the sender ICS user address 
"0012" of the LAN 500-1 sends an ICS user frame F40 to the access 
control apparatus 510-1. and requests a conversion from the ICS name 
#1 "USR#1.ACS#1.DIS#1-VAN#1. JP.AS" to an ICS user address. The 
processing device 512-1 within the access control apparatus 510-1 
receives the ICS user frame F40 from the ICS logic terminal in the 
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line portion 511-1, obtains the ICS network address "7711" and then 
refers to the conversion table 513-1 based on the receiver ICS user 
address of the ICS user frame F40. If the corresponding request 
identification is "4" (connection to an ICS name server of the ICS 
special number), the processing device 512-1 performs the ICS 
encapsulation of the ICS user frame F40 by using the obtained ICS 
network address "7711" , and sends an ICS network frame including an 
ICS name to the ICS name server 550. 

As shown in FIG -34, the ICS name server 550 analyzes the ICS 
name within the ICS frame received from the access control apparatus 
510-1 with the processing device 551 , and refers to the ICS name 
conversion table 552 (Step S500) . Then, in the event that an ICS 
user address corresponding to the ICS name exists within the ICS name 
conversion table 552, the ICS user address is obtained, and the ICS 
network frame F45 including the ICS user address "2014 99 is sent to 
the access control apparatus 510-1 (Step S501) . In the event that 
the questioned ICS name does not exist within the ICS name conversion 
table 552, the access control apparatus 512-1 receives an ICS user 
frame F41 for example, and in the event that the ICS name #2 (i.e., 
"USR#2.ACS#2.DIS#2.VAN#2. JF.AS") described in the ICS user frame F41 
is npt described in the ICS name conversion table 552, the ICS name 
server 550 obtains the ICS network address of another ICS name server 
from the ICS name conversion table 552 based on the ICS name (i.e., 
W DIS#2.VAN#2. JP.AS") . and then obtains the ICS user address M 1130" 
corresponding to the questioned ICS name, by means of performing an 
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information exchange by using the ICS name server 560 and the ICS 
network server communication function (Step S502) . The obtained 
result is sent to the access control apparatus 510-1 (Step S503) . 
The access control apparatus 510-1 exchanges informations with the 
ICS address administration server 570 based on the receiver ICS user 
address which is received from the ICS name server 550 and is 
described in the ICS network frame F45. obtains the ICS network 
address corresponding to the ICS user address and the address related 
information contained in the correspondence table, and writes the 
data comprised of the obtained ICS user address. ICS network address 
and address-related information, to the conversion table 513-1. The 
access control apparatus 510-1 sends the ICS user address "2014" (or 
"1130") obtained from the ICS name server 550 to a terminal user of 
the sender ICS user address "0012" of the LAN 500-1 . the ICS "user 
address "0012" is written in the ICS network frame F45. The terminal 
user of the sender ICS user address "0012" of the LAN 500-1 obtains 
the receiver ICS user address "2014" (or "1130") obtained from the 
access control apparatus 510-1. 

Embodiment-6 (ICS name server): 

In Embodiment-5. the access control apparatus 510-1 does not 
write the data such as the obtained ICS user address, the ICS network 
address and so on to the conversion table 513-1. but rather writes 
this obtained data to a temporary conversion table 514-1. In this 
case, the aforementioned address written to this temporary conversion 
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table are deleted after 24 hours, for example . 

Embodiment-7 (ICS name server): 

In Embodiment-5 , the access control apparatus 510-1 does not 
call up the address administration server 570 and only performs 
service of telling the obtained ICS user address "2014" (or "1130") 
to the terminal of the ICS user address "0012". 

Embodiment-8 (Accounting server) : 

There are three types of charging systems: the "network 
charging system" wherein the charging is performed by counting ICS 
user frames to be sent or received when a communication is made, the 
" information charging system" wherein the charging is performed by 
counting the transferred information in the ICS user frame, and the 
"fixed charging system" wherein no charging is performed regarding 
the transferred ICS user frames, but a constant amount is charging 
for a certain period (month, year, etc.) of a time when the 
registration of the ICS user address or the like continues in the 
conversion table of the access control apparatus. The information 
charging system counts and charges by designating the identification 
which indicates the information charging to the user control field of 
the ICS user frame. The network charging system and the information 
charging system are "transmitting account" if the transmitter of the 
communication bears the charges, and are "receiving account" if the 
receiver does. Each of the network charging system and the 
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account server 840 which is one of the ICS network servers (Step 
S810) . However, in the event that the read type indicates the fixed 
charging system, no formation of account information not transferring 
the account information in the form of an account information frame 
F51 to the account server 840 is performed (Step S820) . 

The account server 840 receives the account information frame 
F51 sent from each of the access control apparatuses, and stores the 
account information contained within the account information frames. 
There is an account processing device 841 and an account information 
database 842 within the account server 840. whereby the account 
processing device 841 receives the accounting information frame F51 
sent from the access control apparatus 810-1. analyzes the account 
informat ion contained within the account inf ormat ion frame F 51 , and 
stores the information in the account information database 842. The 
account information database 842 uses the ICS network address and the 
ICS user address as identifiers, arid stores the account information 
as a database. Also, in the event that the charging system is the 
charge-by-quantity charging system, the account information database 
842 , *s , tores the information regarding the quantity in the form of a 
count number, which the count number may be set with an upper limit, 
and in the event that the count exceeds the set upper limit, the 
account server 840 notifies to the access control apparatus 810-1 
that the upper limit has been exceeded, and the access control 
apparatus 810-1 which receives the notification terminates the 
communication of the user. The account server 840 is capable of 
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information charging system is called as M charge-by-quantity charging 
system" . 

«Conf iguration» 

The charging system in the ICS network according to the 
present invention will be explained with reference to FIGs.35 and 36. 
Each example of the conversion table 813-1, the definition table for 
fixed charges 843 and the account information database 842 are 
respectively shown in FIG. 37, FIG. 38 and FIG. 39. 

Setting information of the charging system is held in the 
conversion table 813-1 in the access control apparatus 810-1 and the 
definition table for fixed charges 843 in the account server 840, and 
a set value indicating the network charging or the information 
charging and a set value indicating the charge-by-quantity charging 
system (identify the transmitting account and the receiving account) 
or the fixed charging system (identify the transmitting account and 
the receiving account) are held in the conversion table 813-1. The 
operation will be explained with reference to FIG. 40. The access 
control apparatus 810-1 receives the ICS user frame F50 (Step S800) , 
and' reads out the type of charging system for each ICS frame held in 
the conversion table 813-1 us read out based on the ICS user address 
contained in the ICS user frame F 50 and checks up the account 
condition (Step S801) . The access control apparatus 810-1 forms the 
account information in the event that the read type indicates the 
charge-by-quantity charging system, and transfers the account 
information in the form of an account information frame F51 to the 
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handing the stored account information to other VANs and users using 

the ICS network server communication function. 

(1) Example of communication with an arrangement of network 

charging, transmitting charging and charge-by-quantity charging 

system: 

Description will be made regarding a case wherein the 
corporation X and the corporation Y perform inter-corporation 
communication using the ICS 800 according to the present invention. 
In this case, the charging system for the LANs 800-1 and 800-3 is the 
charge-by-quantity charging system for the network charging, with the 
entire bill being borne by the LAN 800-1, and no information charging 
being conducted. "^w^- 
«Preparations to make for communication^ 

The LANs 800-1 and 800-3 are each connected to the respective 
access control apparatuses; 810-1 and 810-4. 
«Preparations to make for charging» 

The charging condition for the LANs 800-1 and 800-3 which are 
to conduct the communication is registered in the conversion table 
813-J. The charging conditions are set for registering in the 
conversion table 813-1 based on the transmitting ICS network address, 
the receiver ICS user address, the receiving ICS network address, and 
the receiver ICS user address. A value "1" is set to indicate that 
network charging is to be conducted by charge-by-quantity charging 
with transmitting charging. Also, a value "1" is set for the 
charging unit price. Since the information charging is not to be 



performed, a value "0" indicating non-charging is set to the charging 
conditions in the information charging condition of the conversion 
table 813-1. A value M 0 W indicating the fixed charging system is set 
in the conversion table of the access control apparatus 810-4 
containing the LAN 800-3, to keep the access control apparatus 810-4 
from performing the account processing, since the LAN 800-1 is to be 
billed. 

«Description of operation of charging» 

Regarding the ICS user frame F50 sent from the terminal of 
the ICS network address "0012" connected to the LAN 800-1, the 
charging condition fields are specified from the sender ICS user 
address and the receiver ICS user address in the ICS user frame at 
the processing device 812-1 within the access control apparatus 810-1 
(Steps S800 and S801) . and a reference is made to the charging 
conditions in order to specify the charging system relating to the 
network charging from the field (Step S810) . Since this is vi- 
ndicating that the charging system is the charge-by-quantity 
charging and that transmitting charging is to be performed, the 
chafing unit price is referred to (Step S811) , the charging 
information is formed (e.g.. charging unit price "1" is formed as one 
unit of charging information) (Step S812), and that charging 
information is transferred to the account server 840 in the form of 
an account information frame F51 (Step S813) . In the account 
processing device 841 within the account server 840. the network 
account counter of the account information database 842 is 
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incremented, according to the charging information within the account 
information frame F51 received from the access control apparatus 810- 
1 (Step S814) . In the event that the charging conditions is neither 
in examples described later, the charging described here is 
performed. 

(2) Example of communication with an arrangement of network 

charging, transmitting charging and fixed charging system: 

Description will be made regarding a case wherein the 
corporation X performs the intra-corporation communication using the 
ICS 800 according to the present invention. In this case, the 
charging system for the LANs 800-1 and 800-2 is the fixed charging 
system for the network charging, with the entire bill being borne by 
the LAN 800-1, and no information charging being 1 conducted. 
«Preparations to make for communication» 

The LANs 800-1 and 800-2 are each connected to the respective 
access control apparatuses 810-1 and 810-5 - 
«Preparations to make for charging» 

The charging condition for the LANs 800-1 and 800-2 which are 
to conduct the communication is registered in the conversion table 
813-1. The charging conditions are set for registering in the 
conversion table 813-1 based on the transmitting ICS network address, 
the sender ICS user address, the receiving ICS network address and 
the receiver ICS user address. A value "0" is set to indicate that 
network charging is to be conducted by the fixed charging system, and 
also, a value "l w indicating the transmitting charging is set to 
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billing bearing of the definition table for fixed charges 843, 
indicating the party bearing the charges. Since the information 
charging is not to be performed, a value M (T indicating non-charging 
is set to the charging conditions in the information charging 
condition of the conversion table 813-1. A value "0" indicating the 
fixed charging system is set in the conversion table of the access 
control apparatus 810-5 containing the LAN 800-2. 
«Description of operation of charging» 

Regarding the ICS user frame sent from the terminal of the 
ICS network address "0012" connected to the LAN 800-1. the charging 
condition fields are specified from the sender ICS user address and 
the receiver ICS user address and in the ICS user frame at the 
processing device 812-1 within the access control apparatus 810-1 
(Steps S800 and S801) , and a reference is made to the charging 
conditions in order to specify the charging system relating to the 
network charging from the field (Step S810) . Since this is M 0" 
indicating that the charging system is fixed charging, no charging 
processing such as forming the charging information is performed 
(Stej) S820) . The processing for billing is performed with reference 
to the definition table for fixed charges 843. That is. billing is 
performed to the LAN 800-1. since the value "0" indicating 
transmitting charging is set to the definition table for fixed 
charges 843. 

(3) Example of communication with an arrangement of network 
charging, receiving charging and charge-by-quantity charging system: 

5 6 

BNSOOCIO: <GB 23201 67A_I_> 



Description will be made regarding a case wherein the 
corporation X and the corporation Y perform inter-corporation 
communication. In this case, the charging system for the LANs 800-1 
and 800-3 is the charge^by-quantity charging system for network 
charging, with the entire bill being borne by the LAN 800-3. and no 
information charging being conducted. 
«Preparations to make for communicatibn» 

The LANs 800-1 and 800-3 are each connected to the respective 
access contrbl apparatuses 810-1 and 810-4 . 
«Preparations to make for charging» 

The charging condition for the LANs 800-1 and 800-3 which are 
to conduct the communication is registered in the conversion table 
813-1. the charging conditions are set for registering in the 
conversion table 813-1 based oh the transmitting ICS network address, 
the sender ICS user address, the receiving ICS network address and 
the receiver ICS user address. A value "2" is set to indicate that 
network charging is to be conducted by the charge-by-quantity 
charging system, and also, a value "1" is set for the charging unit 
priSe. Since the information charging is not to be performed, a 
value "0" indicating non-charging is set to the charging conditions 
in the information charging condition of the conversion table 813-1 - 
A value "2" indicating the charge-by-quantity charging system and the 
receiver charging is set to the conversion table of the access 
control apparatus 810-4 containing the LAN 800-3. since the LAN 800-3 
is to be billed. 
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«Description of operation of charging» 

Regarding the ICS user frame sent from the terminal of the 
ICS network address M 0012" connected to the LAN 800-1, the charging 
condition fields are specified from the sender ICS user address and 
the receiver ICS user address in the ICS user frame at the processing 
device 812-1 within the access control apparatus 810-1 (Steps S800 
and S801), and a reference is made to the charging conditions in 
order to specify the charging system relating to the network charging 
from the field (Step S810) . Since this is "2 W indicating that the 
charging system is charge-by-quantity and that the receiving charging 
is to be performed, the charging information is formed (e.g., 
charging unit price "1" is formed as two units of the <&arging 
information), and that the account information frame is transferred 
to the account server 840. In the account processing device 841 
within the account server 840. the network account counter of the LAN 
800-3 of the account information database 842 is incremented, 
according to the charging information within the account information 
frame received from the access control apparatus 810-4. 
(4)^, Example of communication with an arrangement of network 
charging, receiving charging and fixed charging system: 

Description will be made regarding a case wherein the 
corporation X performs intra-corporation. In this case, the charging 
system for the LANs 800-1 and 800-2 is the fixed charging system for 
the network charging, with the entire bill being borne by the LAN 800- 
2. and no information charging being conducted. 
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«Preparations to make for communication» 

The LANs 800-1 and 800-2 are each connected to the respective 
access control apparatuses 810-1 and 810-5 . 
«Preparations to make for charging» 

The charging condition for the LANs 800-1 and 800-2 which are 
to conduct the communication is registered in the conversion table 
813-1. The charging conditions are set for registering in the 
conversion table 813-i based on the transmitting ICS network address, 
the receiver ICS user address, the receiving ICS network address, and 
the receiver ICS user address. A value "0" is set to indicate that 
network charging is to be' conducted by f ixed charging, and -also , a 
value -2" indicating receiving charging is set to billing bearing of 
the definition table for fixed charges 843. indicating the party 
bearing the charges. Since the information charging is not to be 
performed, a value "0" indicating non-charging is set to the charging 
conditions in the information charging condition of the conversion 
table 813-1. A value "0" indicating the fixed charging system is set 
tq the conversion table of the access control apparatus 810-5 
containing the LAN 800-2. 
«Description of operation of charging» 

Regarding the ICS user frame sent from the terminal of the 
ICS network address "0012" connected to the LAN 800-1. the charging 
condition fields are specified from the sender ICS user address and 
the receiver ICS user address in the ICS user frame at the processing 
device 812-1 within the access control apparatus 810-1 (Steps S800 
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and S801), and a reference is made to the charging conditions in 
order to specify the charging system relating to the network charging 
from the field (Step S810) . Since this is "0" indicating that the 
charging system is fixed charging, no charging processing such as 
forming charging information is performed (Step S820) . The 
processing for billing is performed with reference to the definition 
table for fixed charges 843. That is, billing is performed to the 
LAN 800-2, since a value "2 W indicating transmitting billing is set 
to the definition table for fixed charges 843. 

(5) Example of communication with an arrangement of information 
charging, transmitting charging and charge-by-quantity charging 
system: 

Description will be made regarding a case wherein the 
corporation X and the corporation Y perform the communication. In 
this case, the charging system for the LANs 800-1 and 800-3 is the 
information charging, with no network charging being conducted. The 
entire bill is borne by the LAN 800-1. 
«Preparations to make for communication» 

The LANs 800-1 and LAN 800-3 are each connected to the 
respective access control apparatuses 810-1 and 810-4. 
«Preparations to make for charging» 

For the charging conditions for the network charging 
conditions, a value "0" indicating non-charging is set in the 
conversion table 813-1, and since charging itself is not performed, 
there is no setting of the charging unit price. A value "3" is set 
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to indicate that information charging condition is to be conducted by 
charge-by-quantity charging and transmitting charging. Also, a value 
"2" is set for the charging unit price. 
«Description of operation of charging» 

Regarding the ICS user frame sent from the terminal of the 
ICS network address "0012 w connected to the LAN 800-1, the charging 
condition fields are specified from the sender ICS user address and 
the receiver ICS user address in the ICS user frame at the processing 
device 812-1 within the access control apparatus 810-1 (Steps S800 
and S801). and a reference is made to the charging conditions in 
order to specify the charging system relating to the network 
communication from the field (Step S810) V Since this is "0" 
indicating non-charging is set, network charging is not performed 
(Step S820) . Next . a reference is made to the charging conditions of 
the information charging conditions, in order to specify the 
conditions of charging related to the information charging. In this 
case, a value "1" is set which indicates charging-by-quantity which 
is v to be borne by the transmitter, so the charging-by-quantity 
charging is performed. Also, the charging unit price which indicates 
the weighting of this charging-by-quantity is referred to. which in 
the case is set at a value of 44 2". Next, based on the obtained 
information, the charging information for each ICS user frame is 
formed (e.g., charging unit price -2" is formed as two units of the 
charging information) . and that the charging information is 
transferred to the account server 840 in the form of an account 
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information frame F51. The account processing device 841 within the 
account server 840 which received the charging information specifies 
the information storage field of the account information database 842 
based on the transmitting ICS network address, the sender ICS user 
address, the receiving ICS network address and the receiver ICS user 
address from the account information frame F51, and the network 
account counter is incremented according to the charging information 
within the account information frame F51. 

(6) Example of communication with an arrangement of information 
charging, receiving charging and charge-by-quantity charging system: 

Description will be made regarding a case wherein the 
corporation X and the corporation Y perform the inter-corporation 
communication. In this case, the charging system for the LANs 800-1 
and 800-3 is the charge-by-quantity charging system for the 
information charging, and no network charging being conducted. The 
entire bill is borne by the LAN 800-3 which is a receiver. 
«Preparations to make for communication» 

The LANs 800-1 and 800-3 are each connected to the respective 
access control apparatuses 810-1 and 810-4. 
«Preparations to make for charging» 

For the charging conditions for network charging conditions, 
a value "0" indicating non-charging is set in the conversion table 
813-1, and since charging itself is not performed, there is no 
setting of the charging unit price. A value "2 W is set to the 
information charging conditions to indicate that information charging 
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condition is to be conducted by charge-by-quantity charging and 
transmitting charging. Also, a value "2" is set for the charging 
unit price. 

«Description of operation of charging» 

Regarding the ICS user frame sent from the terminal of the 
ICS network address "0012 " connected to the LAN 800-1. the charging 
condition fields are specified from the sender ICS user address and 
the receiver ICS user address and in the ICS user frame at the 
processing device 812-1 within the access control apparatus 810-1 
(Steps S800 and S801) . and a reference is made to the charging 
conditions in order to specify the charging system relating to the 
network communication from the field (Step S810) . Since this is "0" 
indicating non-charging is set. network charging is not performed 
(Step S820) . Next, a reference is made to the charging conditions of 
the information charging conditions, in order to specify the 
conditions of charging related to the information charging. In this 
case, a value "2" is set which indicates the charging-by-quantity 
charging which is to be borne by the receiver, so the charging-by- 
quantity charging is performed. Also, the charging unit price which 
indicates the weighting of the charging-by-quantity charging is 
referred to. which in this case is set at a value of "2". Next, 
based on the obtained information, the charging information for each 
ICS user frame is formed (e.g:. charging unit price "2" is formed as 
two units of the charging information), and that the charging 
information is transferred to the account server 840 in the form of 
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an account information frame F51. The account processing device 841 
within the account server 840 which received the charging information 
specifies the information storage field of the account information 
database 842 based on the transmitting ICS network address, the 
sender ICS user address, the receiving ICS network address and the 
receiver ICS user address from the account information frame F51. and 
the network account counter is incremented according to the charging 
information within the account information frame F51. 
(7) Example of communication with an arrangement of information 

charging, transmitting charging and charge-by-quantity charging 
system, wherein the charging conditions have not been registered in a 
conversion table beforehand: 

Description will be made regarding a case wherein the 
corporation X and the corporation Y perform a communication. The 
charging conditions for a communication between the LANs 800-1 and 
800-3 are the same as described above, but there is a difference in 
this case in that values for stipulating the charging conditions are 
not registered in the conversion table 813-1 of the access control 
apparatus 810-1 connected to the LAN 800-1. 
«Preparations to make for communication» 

The LANs 800-1 and 800-4 are each connected to the respective 
access control apparatuses 810-1 and 810-2 . 
«Preparations to make for charging» 

In this case, there are no charging conditions registered in 
the conversion table 813-1, so there is no need to make a preparation 
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in the access control apparatus 810-1 containing the LAN 800-1. The 
receiving charging conditions for the LAN 800-4 are set in the 
conversion table in the access control apparatus 810-2 containing the 
LAN 800-4. A value "0" indicating non-charging is set to the 
charging conditions in the information charging condition of the 
conversion table 813-1. Since the charging itself is not performed, 
there is no setting of the charging, unit price. A value "3" is set 
to the information charging conditions to indicate that the 
information charging is to be conducted by the charge-by-quantity 
charging and the transmitting charging. Also, a value "1" is set for 
the charging unit price. 
«Description of operation of charging» 

Regarding the ICS user frame sent from the terminal of the 
ICS network address "0012" connected to the LAN 800-1. specification 
of the charging condition fields is attempted using the sender ICS 
user address, and the receiver ICS user address in the ICS user frame 
from the conversion table 813-1 at the processing device 812-1 within 
the access control apparatus 810-1 (Steps S800 and S801) . but since 
there are no fields indicating the pertinent charging conditions in 
this case, a contact is made with the access control apparatus 810-4 
containing the receiver user, based on the receiver ICS user address 
of the receiver user (Step S802) . The access control apparatus 810-4 
refers to the charging conditions of the receiver user with the 
conversion table in the access control apparatus 810-4. and replies 
of the charging conditions to the access control apparatus 810-1. 
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The charging conditions which the access control apparatus 810-1 has 
obtained from the access control apparatus 810-4 are registered in a 
temporary conversion table 814-1 (Step S803) . Subsequently, a 
reference is made in the processing device 812-1 to the charging 
conditions in order to specify the charging conditions relating to 
the network communication from the charging conditions. Since this 
is "0" indicating non-charging is set, network charging is not 
performed (Step S820) . Next, a reference is made to the charging 
conditions of the information charging conditions, in order to 
specify the conditions of charging related to the information 
charging. In this case, a value "l w is set which indicates charging- 
by-quantity which is to be borne by the transmitter, so the charging- 
by-quantity charging is performed. Also, the charging unit price 
which indicates the weighting of the charging-by-quantity charging is 
referred to, which in this case is set at a value of "1", and thus 
the weighting of this charging is known. Next, based on the obtained 
information, the charging information for each ICS user frame is 
formed (e.g.. charging unit price "1" is formed as one unit of the 
changing information) . and that the charging information is 
transferred to the account server 840 in the form of an account 
information frame F51. The account processing device 841 within the 
account server 840 which received the charging information specifies 
the information storage field of the account information database 842 
based on the transmitting ICS network address and the receiver ICS 
user address from the account information frame F51, and the network 
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account counter is incremented according to the account information 
within the account information frame F51 . 

Embodiment-9 (ICS frame database server): 

FIGs.41 and 42 show an example of an ICS 900 which includes 
ICS frame database servers 950 and 960 which are a type of ICS 
network servers. The ICS frame database servers 950 and 960 store 
data based on requested timing from the side of the terminals 
(hereafter referred to as "ICS-using terminal") using the ICS 900. or 
removes the stored data and sends the data to the requester . The ICS 
frame database servers 950 and 960 are respectively comprised of 
processing devices 951 and 961 / storage' information administration 
tables 952 and 962. and BOXs 953 and 963 . Examples of storage - : 
informat ion administration tables 952 and BOX 953 „ and storage 
information administration tables 962 and BOX 963 are respectively 

shown in FIGs. 43 and 44. 

The processing devices 951 and 961 receive ICS user frames 
frpm the ICS-using terminals, refer to the usage requests of ICS 
frame database servers explicitly indicated by the ICS-using 
terminals, perform storage commanding of the ICS user frames to the 
storage information administration tables 952 and 962. and perform 
storage instruction of information to the BOXs 953 and 963. The 
storage information administration tables 952 and 962. upon receiving 
the instruction from the processing devices 951 and 961. store items 
regarding which administration is necessary for each separate ICS- 
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using terminal, such as the index number of stored information. The 
BOXs 953 and 963, upon receiving the instruction from the processing 
devices 951 and 961. store administration number of stored 
information for each separate ICS-using terminal, user information 
and so forth. The following is a description of the preparatory 
items for using ICS frame database servers 950 and 960 and examples 
of communication therewith. 
«Preparatory items» 

The operator of the VAN-1 registers the information (in the 
present embodiment. ICS user address "0012", etc.) regarding the user 
in the storage information administration table 952 and the BOX 953 
beforehand, so that the storage of information can be performed for a 
terminal having the ICS user address "0012", being connected to the 
LAN 900-1 of the corporation X. Also, in the same way. the operator 
of the VAN-3 registers the information (in the present embodiment. 
ICS user address "0034". etc.) regarding the user in the storage 
information administration table 962 and the BOX 963 beforehand, so 
that the storage of information can be performed for a terminal 
having the ICS user address •'0034", being connected to the LAN 900-2 
of the corporation X. The ICS-using user sends an ICS user frame F60 
as shown in FIG. 45 to the ICS 900. This ICS user frame F60 is 
provided with the following to the user control field thereof: a 
usage request identifier (an identifier which explicitly indicates 
using the ICS frame database server) for using the ICS frame database 
server, and an information operating identifier (an identifier which 
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explicitly indicates operation of information stored in the ICS frame 
database server) . Incidentally, although the description of the 
present embodiment involves the user attaching the usage request 
identifier and the information operating identifier to the user 
control field of the ICS user frame F60. thus achieving the usage 
request of the ICS frame database server by the user, but the usage 
request identifier and the information operation identifier may be 
attached to the ICS user data field, instead. 
«Examples of communication» 

(1) Communication example-1 (Operation of the ICS frame database 
server on the sending side) : 

A terminal which is connected to the LAN 900-1 ;of the c 
corporation X and has an ICS user address "0012" performs a 
communication to a terminal which is connected to the LAN 900-2 of 
the corporation X and has an ICS user address "0034" , using the ICS 
frame database server. A flowchart is shown in FIG. 46. describing 
the operation thereof. 

The transmitter terminal sends an ICS user frame F60 for 
using the ICS frame database server 950 to the ICS 900. the ICS user 
frame F60 being provided at the user control field with a usage 
request identifier (transmitting storage user administration number: 
a code which the user using the ICS provides optionally, used as a 
search index number in the event that the ICS user operates the 
stored information) and an information operating identifier (transfer 
schedule time, information storage, information transfer, information 
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elimination, information completion, etc.). The access control 
apparatus 910-1 received this (Step S900) refers to the usage request 
identifier of the ICS user frame F60 at the processing device 912-1 
(Step S901), and in the event that the number of the user request 
identifier set by the transmitter terminal exists, the ICS user frame 
F60 is transferred to the processing device 951- The processing 
device 951 received the ICS user frame F60 refers to the usage 
request identifier and the information operating identifier (Step 
S910K and executes the operation indicated in the information 
operating identifier. 

In the event that information storage is indicated, the 
processing device 951 receives the usage request identifier 
(transmitting storage user administration number) and the information 
operating identifier (information storage) of the ICS user frame F60 
sent from the transmitter terminal, thereby storing the receiver ICS 
user address and the usage request identifier in the storage 
information administration table 952 corresponding to the sender ICS 
user address of the frame, and then stores the ICS user data frame in 
the^SOX 953 (Step S911) . Since the user frame to be stored is sent 
from the transmitter in the form of being divided into a plurality of 
ICS user frames, this operation is performed until the last frame of 
the ICS user frames to be stored is indicated, by means of the 
information operation identifier (information completion) indicated 
in the ICS user frame F60 (Step S912) 

In the event that the transfer schedul time is indicated 
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(Step S913) . the processing device 951 receives the usage request 
identifier (transmitting storage user administration number) and the 
information operating identifier (transfer schedule time) of the ICS 
user frame F60 sent from the transmitter terminal, thereby storing 
the specified time in the storage information administration table 
952 (Step S914) . and the processing device 951 also transfers the 
information stored in the BOX 953 to the receiver terminal at a pre- 
determined time, by means of constantly monitoring the transfer 

schedui time (Step S915) . 

In the event that the information transfer is indicated, the 
processing device 951 receives the usage request identifier 
(transmitting storage user administration number) and the: information 
operating identifier (transfer request) of the ICS user frame F60 
sent from the transmitter terminal, thereby sending the information 
(ICS user frame) stored in the BOX 953 to the receiver terminal (Step 
S916) . Also, in the event that the information elimination is 
indicated, the processing device 951 receives the usage request 
identifier and the information operating identifier (information 
elimination) of the ICS user frame F60 sent from the transmitter 
terminal, thus eliminating the information stored in the storage 
information administration table 952 and the BOX 953 (Step S917) . 
(2) Communication example-2 (Operation of the ICS frame database 

server on the receiving side) : 

A terminal which is connected to the LAN 900-2 of the 
corporation X and has an ICS user address "0034- receives a 
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communication from a terminal which is connected to the LAN 900-1 of 
the corporation X and has an ICS user address M 0012'\ using the user 
BOX. A flowchart is shown in FIG. 47, describing the operation 
thereof . 

The transmitter terminal sends an ICS user frame F60 for 
using the receiver side ICS frame database server 960 to the ICS 900. 
the ICS user frame F60 being provided at the user control field with 
a usage request identifier (receiving storage user administration 
number: a code which the user using the ICS provides optionally, used 
as an index number in the event that the ICS user operates the stored 
information) and the information operating identifier. The ICS user 
frame F60 is sent through the ICS 900 to the access control apparatus 
910-5 containing the receiver terminal (Step S920) . The processing 
device 912-5 refers to the usage request identifier of the ICS user 
frame F60 (Step S921) . and if the number of the usage request 
identifier set by the transmitter terminal exists, transfers the ICS 
user frame F60 to the processing device 961. 

The processing device 961 received the ICS user frame F60 
cheeks up the information operating identifier (information storage, 
information transfer, information elimination, information 
completion, etc.) of the ICS user frame F60 (Step S930) . in a case of 
the information storage, stores the usage request identifier in the 
storage information administration table 962 corresponding to the 
sender ICS user address and the receiver user address of the frame, 
and then stores the ICS user frame in the BOX 963 (Step S931) . The 
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ICS user frame to be stored is sent from the transmitter in the form 
of being divided into a plurality of ICS user frames, so in the 
present embodiment, this operation is performed until the last frame 
of the ICS user frames to be stored is indicated, by means of the 
information operating identifier (information completion) indicated 
in the ICS user frame F60 (Steo S932) . The processing device 962 
notifies to the terminal of the receiver that there is information 
addressed to the receiving terminal in the ICS frame database server 
960 by attaching the receiving storaige user administration number, at 
a timing (e.g. noon) agreed on beforehand with the receiver terminal 
(Step S933) . The receiver terminal which has been notified sends an 
ICS user frame F60 which set the usage request identifier and 
information operating identifier (information transfer) , to the 
access control apparatus 910-5. the ICS frame database server 960 
sends the information stored in the BOX 963 to the receiver terminal 
(Step S936) and then the receiver terminal receives the information 
(ICS user frame) stored in the ICS frame database server 960. 

v The processing device 961. upon receiving a frame explicitly 
indicating the usage request identifier and the information operating 
identifier (information elimination) of the ICS user frame F60. 
eliminates the information stored in the storage information 
administration table 962 and the BOX 963 (Step S937) . 
(3) Communication example-3 (Case of the receiving side 
temporarily cannot receive): 

In a case that a terminal which is connected to the LAN 900-1 
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of the corporation X and has an ICS user address "0012" performs a 
communication to a terminal which is connected to the LAN 900-2 of 
the corporation X and has an ICS user address "0034" . even if a 
connection cannot be made temporarily between the transmitter 
terminal and the LAN 900-2 of the corporation X. the ICS frame 
database server 960 temporarily stores information addressed to the 
receiving terminal, and executes the communication when the 
connection becomes possible. A flowchart is shown in FIG. 48, 
describing the operation thereof . 

The transmitter terminal sends an ICS user frame F60 to the 
ICS 900. the ICS user frame F60 being provided at the user control 
field with an information operating identifier (temporary storage) 
which allows informations to be distributed even if the communication 
with the receiver terminal is impossible, by storing the informations 
in the ICS frame database server 960 temporarily. The ICS user frame 
F60 is sent through the ICS 900 to the access control apparatus 910-5 
containing the receiver terminal, the access control apparatus 910-5 
receives the ICS user frame F60 (Step S940) . and the processing 
device 912-5 checks us whether or not the usage request identifier in 
the ICS user frame F60 exists (Step S941) and refers to the 
information operating identifier (temporary storage) of the ICS user 
frame F60 (Step S942) . If there is a request for temporary storage, 
a judgment is made whether the receiving side terminal is in a state 
in which communication is available. In the event that the 
communication is available, the ICS user frame F60 is transferred to 
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the receiving terminal (Step S950), in the event that the 
communication is not available, the ICS user frame F60 is transferred 
to the processing device 961 of the ICS frame database server 960. 

The processing device 961. stores the sender ICS user 
address, the receiver ICS user address and the usage request 
identifier of the ICS user frame F60 in the storage information 
administration table 962. and then stores the ICS user frame in the 
BOX 963 (Step S951). The ICS user frame to be stored is sent from 
the transmitter in the form of being divided into a plurality of ICS 
user frames, so in the present embodiment, this operation is 
performed until the last frame of the ICS user frames to be stored is 
indicated, by means of the information operating identifier , 
( information completion) indicated in the ICS user frame F60 (Step 
S952) . The processing device 912-5 constantly monitors the 
communication state with the receiving terminal . and when the 
receiving terminal becomes to be possible to receive, it notifies to 
the processing device 961 that the communication with the receiver is 
available. Upon receiving the notification, the processing device 
96rnotifies to the receiver terminal that there is information 
addressed to the receiver in the ICS frame database server 960. at a 
timing (e.g. after 5 minutes) agreed on beforehand with the receiver 
terminal (Step S953) . The receiver terminal which has been notified 
sends an ICS user frame F60 which is set the usage request identifier 
(ICS storage user administration number) and the information 
operating identifier (information transfer), to the access control 
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apparatus 910-5, the ICS frame database server 960 sends the 
information stored in the BOX 963 to the receiver terminal (Step 
S956). and the receiver terminal receives the stored information from 
the ICS frame database server 960 (Step S945) . 

When the processing device 961 receives a frame explicitly 
indicating the usage request identifier and the information operating 
identifier (information elimination) of the ICS user frame F60 sent 
from the receiver terminal, it eliminates the information stored in 
the storage information administration table 962 and the BOX 963 
(Step S957) . 

Embodiment-10 (transfer by X. 25. FR. ATM. satellite coinmun^cation. 
and containment of telephone line, ISDN line, CATV line, satellite 
line) : 

The data format from the user in the ICS according to the 
present invention is not restricted to the ICS user frames following 
the protocol of RFC 791 or RFC 1883, but can also be applied to 
containment of telephone line. ISDN line. CATV line, satellite line. 
IPX^° Also, the relay network of the ICS network frame within the ICS 
network may handle X.25. FR. ATM. satellite communication, etc. In 
the present invention, the ATM exchanger includes cell-relay 
equipment, and the ATM network includes cell-relay networks. 

FIG. 49 through FIG. 51 are an example of interface conversion 
in an ICS 1000 according to the present invention, comprised of 
access control apparatuses 1010-1 and 1010-2. ICS frame interface 
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network 1050. X.25 network 1040. FR network 1041. ATM network 1042. 
satellite communication network 1043. X.25/ICS network frame 
converting units 1031-1 and 1031-2. FR/ICS network frame converting 
units 1032-1 "and 1032-2. ATM/ ICS network frame converting units 1033- 
1 and 1033-2. satellite/ICS network frame converting units 1034-1 and 
1034-2. telephone line converting units 1030-1 and 1030-2. ISDN line 
converting units 1029-1 and 1029-2. CATV line converting units 1028-1 
and 1028-2, satellite line converting units 1027-1 and 27-2. and IPX 
converting units 1026-1 and 1026-2. An example of the conversion 
table 1013-1 in the access control apparatus 1010-1 is shown in 

' FIG. 52. ' : " ' ' : 

The ICS frame interface network 1050 is a relay network which 
transfers the ICS network frame following the protocol of RFC 791 or 
RFC 1883 in the format that it is in. The X.25 network 1040 is a 
relay network for transferring frames of an X.25 format, and has; as 
the input/output portion thereof X.25/ICS network frame converting 
units 1031-1 and 1031-2 for converting ICS network frames into frames 
of an X.25 format, and for performing reverse conversion. The FR 
network 1041 is a relay network for transferring frames of a frame 
relay format, and has as the input/output portion thereof FR/ICS 
network frame converting units 1032-1 and 1032-2 for converting ICS 
network frames into frames of an FR format, and for performing 
reverse conversion. The ATM network 1042 is a relay network for 
transferring frames of an ATM format, and has as the input/output 
portion thereof ATM/ICS network frame converting units 1033-1 and 



1033-2 for converting ICS network frames into frames of an ATM 
format, and for performing reverse conversion. The satellite 
communication network 1043 is a relay network for transferring frames 
of a satellite communication format, and has as the input/output 
portion thereof satellite/ICS network frame converting units 1034-1 
and 1034-2 for converting ICS network frames into satellite 
communication network interface, and for performing reverse 
conversion. The telephone line converting units 1030-1 and 1030-2 
have the functions of converting a function equivalent to physical 
layer or data link layer (first and second layers of OSI 
communication protocol) between the telephone line and the access 
control apparatus, and for performing reverse conversion. The ISDN 
line converting units 1029-1 and 1029-2 have the functions of 
converting a function equivalent to physical layer or data link layer 
between the ISDN line and the access control apparatus, and for 
performing reverse conversion. The CATV line converting units 1028-1 
and 1028-2 have the functions of converting a function equivalent to 
physical layer or data link layer between the CATV line and the 
acdtess control apparatus, and for performing reverse conversion. The 
satellite line converting units 1027-1 and 1027-2 have the functions 
of Converting a function equivalent to physical layer or data link 
layer between the satellite line and the access control apparatus, 
and for performing reverse conversion. The IPX line converting units 
1026-1 and 1026-2 have the functions of converting a function 
equivalent to physical layer or data link layer between the IPX line 
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and the access control apparatus, and for performing reverse 
conversion. 

(1) Description will be made regarding a case wherein 
communication is performed between the access control apparatus 1010- 
1 and the access control apparatus 1010-2. via the X.25 network 1040. 

The access control apparatus 1010-1 sends the ICS network 
frame to the X.25 exchanger 10131-1 . The X.25/ICS network frame 
converting unit 1031-1 within the X.25 exchanger 10131-1 converts the 
ICS network frame received from the access control apparatus 1010-1 
into an X.25 format frame as shown in FIG. 53. Then, the X.25 
exchanger 10131-1 sends the X.25 format frame into the X.25 network 
1040. The X.25 format frame sent from the X.25 exchanger 10131-1 is 
transferred through the X. 25 network 1040. and reaches the X.25 
exchanger 10131-2 . Next . the X.25/ ICS network frame converting unit 
1031-2 within the X.25 exchanger 10131-2 performs reverse conversion 
of the received X.25 format frame into ICS network frame format, and 
outputs to the access control apparatus 1010-2 . The access control 
apparatus 1010-2 receives the ICS network frame. Network frames of 
the*lcs 1000 sent from the access control apparatus 1010-2 to the 
X.25 exchanger 10131-2 are transferred to the access control 
apparatus 1010-i in the same manner. 

(2) Description will be made regarding a case wherein a 
communication is performed between the access control apparatus 1010- 
1 and the access control apparatus 1010-2. via the FR network 1041. 
The access control apparatus 1010-1 sends the ICS network 
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frame. The FR/ICS network frame converting unit 1032-1 within the FR 
exchanger 10132-1 converts the ICS network frame received from the 
access control apparatus 1010-1 into an FR format frame as shown in 
FIG. 54. Then, the FR exchanger 10132-1 sends the X.25 format frame 
into the FR network 1041. The FR format frame sent from the FR 
exchanger 10132-1 is transferred through the FR network 1041, and 
reaches the FR exchanger 10132-2. The FR/ICS network frame 
converting unit 1032-2 within the FR exchanger 10132-2 performs 
reverse conversion of the received FR format frame into ICS network 
frame format, and outputs to the access control apparatus 1010-2. 
The access control apparatus 1010-2 receives the ICS network frame. 
ICS network frames sent. from the access control apparatus 1010-2 to 
the FR exchanger 10132-2 are transferred to the access control 
- apparatus 1010-1 in the same manner. 
(3) Description will be made regarding a case wherein a 
communication is performed between the access control apparatus 1010- 
1 and the access control apparatus 1010-2. via the ATM network 1042. 

The access control apparatus 1010-1 sends the ICS network 
frasKs to the ATM exchanger 10133-1. The ATM/ ICS network frame 
converting unit 1033-1 within the ATM exchanger 10133-1 converts the 
ICS network frame received from the access control apparatus 1010-1 
into an ATM format frame as shown in FIG. 55. Then, the ATM exchanger 
10133-1 sends the ATM format frame into the ATM network 1042. The 
ATM format frame sent from the ATM exchanger 10133-1 is transferred 
through the ATM network 1042. and reaches the ATM exchanger 10133-2. 
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Next, the ATM/ ICS network frame converting unit 1033-2 within the ATM 
exchanger 10133-2 performs reverse conversion of the received ATM 
format frame into ICS network frame format, and outputs to the access 
control apparatus 1010-2. The access control apparatus 1010-2 
receives the ICS network frame. ICS network frames sent from the 
access control apparatus 1010-2 to the ATM exchanger 10133-2 are 
transferred to the access control apparatus 1010-1 in the same 
manner. 

(4) Description will be made regarding a case wherein a 
communication is performed between the access control apparatus 1010- 
1 and the access control apparatus 1010-2. via the satellite 
communications network 1043. 

the access control apparatus 10 10-1 sends the ICS network 
frame to the satellite receiver/transmitter 10134-1. The 
satellite/ICS network frame converting unit 1034-1 within the 
satellite receiver/ transmitter 10134-1 converts the ICS network frame 
received from the access control apparatus 1010-1 into an interface 
within the satellite communications network 1043. Then, the 
satellite receiver/transmitter 10134-1 sends the ICS network frame 
converted into an interface within the satellite communications 
network 1043 into the satellite communications network 1043. The ICS 
network frame converted into an interface within the satellite 
communications network 1043 sent from the satellite 
receiver/transmitter 10134-1 is transferred through the satellite 
communications network 1043. and reaches the satellite 
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receiver/transmitter 10134-2. The satellite/ICS network frame 
converting unit 1034-2 within the satellite receiver/transmitter 
10134-2 performs reverse conversion of the received interface within 
the satellite communications network 1043 into ICS network frame 
format, and outputs to the access control apparatus 1010-2. The 
access control apparatus 1010-2 receives the ICS network frame. ICS 
network frames sent from the access control apparatus 1010-2 to the 
satellite receiver/transmitter 10134-2 are transferred to the access 
control apparatus 1010-1 in the same manner. 
(5) Description will be made regarding a case wherein 
coBmunication is performed with an interface of a telephone line 
between a user 1060-1 connected to a telephone line converting unit 
1030-1 of an access control apparatus 1010-1, and a user 1060-2 
connected to a telephone line converting unit 1030-2 of an access 
control apparatus 1010-2, the first user originating the call. 

The user 1060-1 applies a telephone line connection to the 
VAN operator. The VAN operator specifies the access control 
apparatus 1010-1 connecting the user 1060-1. and decides on an ICS 
net^rk address "7721" for the ICS logic terminal. Next, the VAN 
operator sets informations in the conversion table 1013-1 of the 
access control apparatus 1010-1. such as the transmitting ICS network 
address "7721", the receiving telephone number "06-5555-9876" . the 
receiving ICS network address "5521", request identification and so 
forth. In the present embodiment, the request identification "5" 
indicates a telephone line connection. In the same way. the VAN 
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operator sets informations in the conversion table 1013-2 of the 
access control apparatus 1010-2, such as the transmitting ICS network 
address "5521", the receiving telephone number "03-5555-1234" , the 
receiving ICS network address "7721 request identification and so 
forth. 

The user 1060 sends the telephone number "06-5555-9876". The 
telephone line converting unit 1030-1 converts the received telephone 
number into a format which can be read by the processing device 1012- 
1. and sends it to the processing device 1012-1. The processing 
device 1012-1 received the telephone number information from the 
telephone line converting unit 1030-1 with the ICS network address 
"7721" refers to the request identification of the transmitting ICS 
network address "7721" of the conversion table 1013-1. identifies it 
as a telephone line coixnection, and reads the receiving ICS network 
address "5521" from the receiving telephone number "06-5555-9876". 
The access control apparatus 1010-1 forms an ICS network frame having 
a network control field wherein the receiving ICS network address is 
set to "5521" and the transmitting ICS network address is set to 
"7721" and a network data field described information to notify that 
there is a telephone reception, and sends it into a network of ICS 
1000. The ICS network frame sent from the access control apparatus 
1010-1 is transferred through the network of the ICS 1000, and 
reaches the access control apparatus 1010-2. The access control 
apparatus 1010-2 received the ICS network frame having the network 
data field described information to notify that there is telephone 
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reception, outputs a signal from the telephone line converting unit 
1030-2 with the ICS network address "5521" to the user 1060-2 
notifying the reception. Then, the user 1060-2 sends a response 
signal. 

Upon receiving the response signal, the telephone line 
converting unit 1030-2 converts it into a format which can be 
transferred through the network of the ICS 1000. The access control 
apparatus 1010-2 forms an ICS network frame having a network control 
field wherein the receiving ICS network address is set to "7721" and 
the transmitting ICS network address is set to "5521". and a network 
data field described information to notify that there is reply of the 
telephone, and sends it into a network of the ICS. The ICS network 
frame sent from the access control apparatus 1010-2 is transferred 
through the network of the ICS. and reaches the access control 
apparatus 1010-1. The access control" apparatus 1010-2 received the 
ICS network frame having the network data field described information 
to notify that there is a response, outputs a signal from the 
telephone line converting unit 1030-1 having the ICS network address 
"772*f" to the user 1060-1. notifying the response. Thus, the user 
1060-1 and the user 1060-2 begin full-duplex communication by analog 
signals (voice, etc.) and the user 1060-1 sends analog signals. The 
telephone line converting unit 1030-1 received the analog signals 
converts the analog signals into an analog information format which 
can be transferred through the ICS network. 

The access control apparatus 1010-1 forms an ICS network 
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frame having a network control field wherein the transmitting ICS 
network address is set to "7721" and the receiving ICS network 
address is set to "5521". and a network data field described analog 
information, and sends it into a network of the ICS 1000. The ICS 
network frame sent from the access control apparatus 1010-1 is 
transferred through the network of the ICS 1000. and reaches the 
access control apparatus 1010-2. The access control apparatus 1010-2 
received the ICS network frame having network data field described 
the analog information outputs the analog information as analog 
signals converted into a telephone line interface from the telephone 
line converting unit 1030-2 having the ICS network address "5521" to 
the user 1060-2. The analog signals sent from the user 1060-2 are 
transferred to the user 1060-1 by means of the same procedure. 
(6) Description will be made regarding a case wherein a 
communication is performed with an interface of an ISDN line between 
a user 1061-1 connected to an ISDN line converting unit 1029-1 of an 
access control apparatus 1010-1. and a user 1061-2 connected to an 
ISDN line converting unit 1029-2 of an access control apparatus 1010- 
2. the first user originating the call. 

The user 1061-1 applies an ISDN line connection to the VAN 
operator. The VAN operator specifies the access control apparatus 
1010-1 connecting the user 1061-1. and decides on an ICS network 
address "7722" for the ICS logic terminal. Next, the VAN operator 
set informations in the conversion table 1013-1 of the access control 
apparatus 1010-1. such as the transmitting ICS network address 
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"7722", the receiving ISDN number "06-5555-2222", the receiving ICS 
network address "5522", request identification and so forth. In the 
present embodiment, the request identification "6" indicates a ISDN 
line connection. In the same way, the VAN operator sets informations 
in the conversion table 1013-2 of the access control apparatus 1010- 
2, such as the transmitting ICS network address "5522", the receiving 
ISDN number "03-5555-1111", the receiving ICS network address "7722", 
request identification and so forth. 

The user 1061-1 sends the ISDN number "06-5555-2222". The 
ISDN line converting unit 1029-1 converts the received ISDN number 
into a format which can be read by the processing device 1012-1, and 
sends it to the processing device 1012-1. The processing device 1012- 
1 received the ISDN number information from the ISDN line converting 
unit 1029-1 with the ICS network address "7722" refers to the request 
identification of the transmitting ICS network address "7722" of the 
conversion table 1013-1. identifies it as an ISDN line connection, 
and reads the receiving ICS network address "5522" from the receiving 
ISDN number "06-5555-2222". The access control apparatus 1010-1 
forats an ICS network frame having a network control field wherein the 
receiving ICS network address is set to "5522" and the transmitting 
ICS network address is set to "7722", and a network data field 
described information to notify that there is an ISDN reception, and 
sends it into a network of the ICS 1000. 

The ICS network frame sent from the access control apparatus 
1010-1 is transferred through the network of the ICS 1000. and 
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reaches the access control apparatus 1010-2. The access control 
apparatus 1010-2 received the ICS network frame having the network 
data field described information to notify that there is a reception, 
outputs a signal from the ISDN line converting unit 1029-2 with an 
ICS network address "5522" to the user 1061-2. notifying the 
reception. Then, the user 1061-2 sends a response signal. Upon 
receiving the response signal, the ISDN line converting unit 1029-2 
converts it into a format which can be transferred through the 
network of the ICS 1000. The access control apparatus 1010-2 forms 
an ICS network frame having a network control field wherein the 
receiving ICS network address is set to "7722- and the transmitting 
ICS network address is set to "5522". and a network data field, 
described information to notify that there is a reply of the ISDN, 
and sends it into a network of the ICS 1000. 

The ICS network frame sent from the access control apparatus 
1010-2 is transferred through the network of the ICS 1000. and 
reaches the access control apparatus 1010-1. The access control 
apparatus 1010-2 received the ICS network frame having a network data 
fieW described information to notify that there is a response, 
outputs a signal from the ISDN line converting unit 1029-1 having the 
ICS network address "7722" to the user 1061-1. notifying the 
response. Thus, the user 1061-1 and the user 1061-2 begin full- 
duplex communication by digital signals (voice, etc.) and the user 
1061-1 sends the digital signals. The ISDN line converting unit 1029- 
1 received the analog signal converts into a digital information 
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format which can be transferred through the ICS 1000. 

The access control apparatus 1010-1 forms an ICS network 
frame having a network control field wherein the receiving ICS 
network address is set to "5522" and the transmitting ICS network 
address is set to "7722". and a network data field described digital 
information, and sends it into a network of the ICS 1000 . The ICS 
network frame sent from the access control apparatus 1010-1 is 
transferred through the network of the ICS 1000. and reaches the 
access control apparatus 1010-2, The access control apparatus 1010-2 
received the ICS network frame having a network data field described 
the digital information, outputs the digital information as digital 
signals converted into a ISDN line interface from the ISDN line 
converting unit 1029-2 having the ICS network address "5522" to the 
user 1061-2. The digital signals sent from the user 1061-2 are 
transferred to the user 1061-1 by means of the same procedure. 
(7) Description will be made regarding a case wherein a 
communication is performed with an interface of a CATV line between a 
CATV broadcasting station 1062-1 connected to a CATV line converting 
uniW-028-1 of an access control apparatus 1010-1. and a user 1062-2 
connected to a CATV line converting unit 1028-2 of an access control 
apparatus 1010-2. 

The CATV broadcasting station 1062-1 applies a CATV line 
connection with the user 1062-2 to the VAN operator. The VAN 
operator specifies the access control apparatus 1010-2 connecting the 
user 1062-2. and decides on an ICS network address "5523" for the ICS 
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logic terminal. Next, the VAN operator sets informations to a 
portion of the conversion table 1013-1 of the access control 
apparatus 1010-1 corresponding to the transmitting ICS network 
address "7723". such as the receiving ICS network address "5523". 
request identification and so forth. In the present embodiment . the 
request identification "7" indicates a CATV line connection. In the 
same way. the VAN operator sets informations in the conversion table 
1013-2 of the access control apparatus 1010-2. such as the 
transmitting ICS network address "5523". the receiving ICS network 
address "7723". request identification and so forth. 

The CATV broadcasting station 1062-1 sends CATV analog 
signals. The CATV line converting ; uni t 1028-1 converts the received 
CATV analog signals into a format which can be transferred through 
the ICS 1000. The access control apparatus 1010-1 forms an ICS 
network frame having a network control field wherein the receiving 
ICS network address is set to "5523" and the transmitting ICS network 
address is set to "7723". and a network data field described the CATV 
information, and sends it into a network of the ICS 1000. The ICS 
network frame sent from the access control apparatus 1010-1 is 
transferred through the ICS 1000. and reaches the access control 
apparatus 1010-2. The access control apparatus 1010-2 received the 
ICS network frame having network data field described the CATV 
information, outputs the CATV information from the CATV line 
converting unit 1028-2 with an ICS network address "5523" to the user 
1062-2 as CATV analog signals converted to a CATV line interface. 
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The CATV analog signals outputted from the user 1062-2 are 
transferred to the CATV broadcasting station 1062-1 with the same 
procedures . 

(8) Description will be made regarding a case wherein a 
communication is performed with an interface of a satellite line 
between a user 1063-1 connected to a satellite line converting unit 
1027-1 of an access control apparatus 1010-1. and a user 1063-2 
connected to a satellite line converting unit 1027-2 of an access 
control apparatus 1010-2 . 

The user 1063-1 and the user 1063-2 applies a satellite line 
connection between the user 1063-1 and the user 1063-2 to the VAN 
operator. The VAN operator specifies the access control apparatus 
1010-1 connecting the user 1063-1, and decides on an ICS network 
address "7724" for the ICS logic terminal. In the same way, the VAN 
operator specifies the access control apparatus 1010-2 connecting the 
user 1063-2. and decides on an ICS network address "5524" for the ICS 
logic terminal. Next, the VAN operator sets informations to a 
portion of the conversion table 1013-1 of the access control 
apparatus 1010-1 corresponding to the transmitting ICS network 
address "7724". such as the receiving ICS network address "5524", 
request identification and so forth. In the present embodiment, the 
request identification "8" indicates the satellite line connection. 
In the same way. the VAN operator sets informations in the conversion 
table 1013-2 of the access control apparatus 1010-2. such as the 
transmitting ICS network address "5524". the receiving ICS network 
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address "7724", request identification and so forth. 

The user 1063-1 sends satellite signals. The satellite line 
converting unit 1027-1 received interface satellite signals of the 
satellite line converts the satellite signals into an information 
format which can be transferred through the ICS 1000. The access 
control apparatus 1010-1 forms an ICS network frame having a network 
control field wherein the receiving ICS network address is set to 
"5524" and the originating ICS network address is set to "7724", and 
a network data field describing satellite signal information, and 
sends this into the ICS 1000 network. The ICS network frame sent 
from the access control apparatus 1010-1 is transferred through the 
ICS network 1000. and reaches the access control apparatus lOlp-2. 
The access control apparatus 1010-2 received the ICS network frame 
having a network data field described the satellite information, 
outputs satellite signal information from the satellite line 
converting unit 1027-2 with an ICS network address "5524" to the user 
1063-2 as satellite signals converted to a satellite line interface. 
The satellite line interface satellite signals outputted from the 
user* 1063-2 are also transferred to the user 1063-1 with the same 
procedures . 

(9) Description will be made regarding a case wherein a 
communication is performed with an IPX interface between a terminal 
having an IPX address "9901" of a user 1064-1 and a terminal having 
an IPX address "8801" of a user 1064-2. 

The users 1064-1 and 1064-2 apply an IPX connection between a 



9 1 



terminal having an IPX address "9901 M of the user 1064-1 and a 
terminal having an IPX address 44 8801" of the user 1064-2 to the VAN 
operator. The VAN operator specifies the access control apparatus 
1010-1 connecting the user 1064-1 and the IPX converting unit 1026-1 
with an ICS network address "7725". In the same say, the VAN 
operator specifies the access control apparatus 1010-2 connecting the 
user 1064-2 and the IPX converting unit 1026-2 with an ICS network 
address "5525*\ Next, the VAN operator sets informations to a 
portion of the conversion table 1013-1 of the access control 
apparatus 1010-1 corresponding to the transmitting ICS network 
address "7725". such as the sender IPX address "9901 the receiver 
IPX address "8801". the receiving ICS network address "5525" . request 
identification and so forth. In the present embodiment, the request 
identification "9" indicates an IPX connection. In the same way. the 
VAN operator sets informations to a portion of the conversion table 
1013-2 of the access control apparatus 1010-2 corresponding to the 
transmitting ICS network address "5525". such as the sender IPX 
address "8801". the receiver IPX address "9901". the receiving ICS 
network address "7725". request identification and so forth. 

The terminal having an IPX address "9901" of the user 1064-1 
sends an IPX frame with the sender IPX address set to "9901" and the 
receiver IPX address set to "8801". The IPX converting unit 1026-1 
of the access control device receives the IPX frame, and reads the 
sender IPX address "9901" and the receiver IPX address "8801". and 
then reads the receiving network address "5525" of the receiver IPX 
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address "8801" of the sender IPX address "9901" of the transmitting 
ICS network address "7725". from the conversion table 1013-1. The 
access control apparatus 1010-1 forms an ICS network frame having a 
network control field wherein the transmitting ICS network address is 
set to "5525" and the receiving ICS network address is set to "7725". 
and a network data field described IPX frame information, and sends 
it into a network of the ICS 1000. 

The ICS network frame sent from the access control apparatus 
1010-1 is transferred through the network of the ICS 1000, and 
reaches the access control apparatus 1010-2. The access control 
apparatus 1010-2 received the ICS network frame having a network data 
field described the ICS network frame information, outputs IPX frame 
information from the IPX converting unit 1026-2 with an ICS network 
address "5525" to the user 1064-2. in the form of IPX frame converted 
into IPX interface. The terminal having the IPX address "8801" of 
the user 1064-2 receives the IPX frame. On the other hand, the IPX 
frame set in the sender IPX address "8801" and the receiver IPX 
address "9901" sent from the terminal having the IPX address "8801" 
of "^ie user 1064-2 is also transferred to the user 1064-1 with the 
same procedures. 

Embodiment-11 (transfer by X.25. FR. ATM. satellite communication, 
and containment of telephone line, ISDN line. CATV line, satellite 
line) : 

In the above Embodiment-10. the X.25/ICS network frame 
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converting units 1031-1 and 1031-2. FR/ICS network frame converting 
units 1032-1 and 1032-2. ATM/ ICS network frame converting units 1033- 
1 and 1033-2. satellite/ICS network frame converting units 1034-1 and 
1034-2 are each located within relay networks, i.e.. within the X.25 
network 1040. FR network 1041. ATM network 1042 and satellite 
coesunication network 1043. Conversely, as shown in FIGs.56 and 57, 
with the Embodiment-11 . the X.25/ICS network frame converting units 

1131- 1 and 1131-2. FR/ICS network frame converting units 1132-1 and 

1132- 2. ATM/ ICS network frame converting units 1133-1 and 1133-2. 
satellite/ICS network frame converting units 1134-1 and 1134-2 are 
each located within the access control apparatuses 1110-1 and 1110-2. 
That is. while with Embodiment-10 . the received ICS network, frames 
are converted and reverse-converted into formats which can be 
transferred on the side of each of the relay networks (X.25 network 
1040. FR network 1041, ATM network 1042. satellite communication 
network 1043). the conversion being performed by the relay networks, 
with the Embodiment-11. conversion and reverse conversion into 
formats which can be transferred in each of the relay networks is 
performed on the side of the access control apparatuses. 

Embodiment-12 (Containment of access control apparatuses within relay 
networks) : 

In the above Embodiment-10. the X.25/ICS network converting 
units 1031-1 and 1031-2. FR/ICS network converting units 1032-1 and 
1032-2. ATM/ICS network converting units 1033-1 and 1033-2. satellite 
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communication network/ICS network converting units 1034-1 and 1034-2 
are each located within relay networks, i.e.. within the X.25 network 
1040, FR network 1041, ATM network 1042 and satellite communication 
network 1043. with the access control apparatuses 1010-1 and 1010-2 
not being provided within the X.25 network. FR network. ATM network 
and satellite communication network. Conversely, as shown in FIGs.58 
and 59. with the Embodiment-12 . the access control apparatuses 1120- 
1. 1120-2. 1121-1. 1121-2, 1122-1, 1122-2, 1123-1 and 1123-2 are each 
located within the relay networks, i.e.. within the X.25 network 1240- 
1. FR network 1241-1. ATM network 1242-1 and satellite communication 
network 1243-1. That is. while with the Embodiment-10. a conversion 
from the ICS user frames to the ICS network frames and a reverse,; 
conversion thereof based on the administration by the conversion 
table was performed within the access control apparatuses set outside 
of each relay network, in the present example, a conversion from the 
ICS user frames to the ICS network frames (ICS encapsulation) and a 
reverse conversion thereof (ICS reverse encapsulation) based on the 
administration by the conversion table is performed within each of 
the^aforementioned networks, i.e.. within the X.25 network 1040. 
within the FR network 1041. within the ATM network 1042 and within 
the satellite communication network 1043. 

Embodiment-13 (Connection of relay network to relay apparatus) : 

In the above Embodiment-10. the X.25 network 1040. FR network 
1041. ATM network 1042 and satellite communication network 1043 are 
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each connected to the access control apparatuses 1010-1 and 1010-2, 
but are not connected to relay apparatuses. Conversely, as shown in 
FIG. 60. with the Embodiment-13, the X.25 network 2020-1 is connected 
to the access control apparatus 2010 and the relay apparatus 2030, 
the FR network 2021-1 is connected to the access control apparatus 
2011 and the relay apparatus 2031. the ATM network 2022-2 is 
connected to the access control apparatus 2012 and the relay 
apparatus 2032. and the satellite communications network 2023-1 is 
connected to the access control apparatus 2013 and the relay 
apparatus 2033. and further, the X.25 network 2020-1 is connected to 
the relay apparatuses 2030, 2034 and 2035. the FR network 2021-2 is 
connected to the relay apparatuses 2031 and 2035, the ATM network 
2022-2 is connected to the relay apparatuses 2031. 2032 and 2036, and 
the satellite communications network 2023-2 is connected to the relay 
apparatus 2033, 2036 and 2037. That is, in the present embodiment, 
the access control apparatuses are arranged such that the X.25 
network 2020-1 and 2020-2. the FR network 2021-1 and 2021-2. the ATM 
network 2022-1 and 2022-2. and the satellite communication network 
2023^L and 2023-2 are each connected to relay apparatuses. 

Embodiment-14 (Case where the access control apparatus is provided 
outside of the ICS) : 

FIG. 61 shows a 14th embodiment according to the present 
invention, with the access control apparatus 1210-1 being provided 
outside of the ICS 1200. i.e.. within the LAN-1200 of the corporation 
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X. Accordingly, the ICS address administration server 1250-1 and the 
ICS network server 1260-1 are also located outside of the ICS 1200. 
i.e.. within the LAN 1200-1. The access control apparatus 
integrating administration server 1240 is located inside of the ICS 
1200, The access control apparatus integrating administration server 
1240 has functions of communicating and exchanging information with 
the access control apparatus 1210-1. the ICS network administration 
server 1250-1 and the ICS network server 1260-1. using the ICS 
network communication function. At a time that the VAN operator 
enters into contract with the corporation X, and connects the user 
communication line to the ICS 1200. the functions of the access 
control apparatus integrating administration server 1240 are used to 
write data in the conversion table within the access control 
apparatus 1210-1. Also, the ICS address administration server 1250-1 
and the ICS network server 1260-1 can each use respective ICS network 
server communication function to communicates with the ICS address 
administration server 1250-2 and the ICS network server 1260-2 within 
the ICS 1200. Since the present invention is configured thus, a user 
terminal within the LAN 1200 can perform the intra-corporation 
communication and the inter-corporation communication, as described 
with the above Embodiment-1 . Also, it is clearly understood that the 
intra-corporation communication and the inter-corporation 
communication can be conducted with the user terminal as described 
above, even in the event that the ICS address administration server 
1250-1 and the ICS network server 1260-1 are located within the ICS 
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Embodiment- 15 (Speed class and degree of priority) : 
«Conf igurat ion» 

As shown in FIG. 62 through FIG. 64. the ICS 8000-1 includes 
access control apparatuses 8010-1, 8010-2, 8010-3 and 8010-4, relay 
apparatus 8020-1. ICS address administration server 8025-1 and ICS 
network server 8027-1. these apparatuses being connected by ICS 
network communication lines 8030-1. 8030-2. 8030-3. 8030-4. 8030-5 
and 8030-6 which transfer ICS network frame. The line unit 8011-1, 
processing device 8012-1 and conversion table 8013-1 are all provided 
within the access control apparatus 8010-1. Connected to the 
plurality of ICS logic terminals in the line unit 8011-1 are ICS 
logic communication lines 8051-1. 8051-2. 8051-3 and 8051-4, these 
each being provided with ICS network addresses "7721". "7723". "7724" 
and "7725". Speed classes are given to the ICS communication lines 
within the ICS 8000-1. indicating the speed of transferring the ICS 
network frames. For example, the speed class of the ICS 
communication lines 8030-1. 8030-2 and 8030-6 are all "4". the speed 
class of the ICS communication lines 8030-3 and 8030-5 are each "3". 
and the speed class of the ICS communication line 8030-4 is "2". An 
example of the conversion table 893-1 is shown in FIG. 65. The speed 
class is determined by a standard with in the same as the speed class 
registered within the conversion table 8013-1. An ICS network 
address "7811" is provided to the ICS address administration server 
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8025-1, and an ICS network address "7821 " is provided to the ICS 
address administration server 8027-1, these being connected to the 
access control apparatus 8010-1 by the ICS network communication 
lines 8054-1 and 8054-2. 

The user 8400-1 which is an ICS communication terminal has an 
ICS user address "2500". is connected to the line unit 8011-1 via the 
ICS logic communication line 8051-1; the user 8400-2 which is an ICS 
communication terminal has an ICS user address "2510", is connected 
to the line unit 8010-2 via the ICS logic communication line 8052-1; 
the user 8400-3 which is an ICS communication terminal has an ICS 
user address "3600" , and the user 8400-4 which is an ICS °r 
communication terminal has an ICS user address "3610". these being 
connected to the line unit 8010-3 via the gateway 8041^1 and the ICS 
logic communication line 8053-1, respectively. 

The method for registering the ICS network address and the 
ICS user address with the conversion table 8013-1 is the same as with 
the aforementioned Embodiments-1 and -2, with the points differing 
therewith being as follows: the speed registered in the conversion 
table 113-1 in the Embodiment-1 is deleted, and instead, a speed 
class and degree of priority are registered; and the speed class and 
degree of priority are stored in the address administrating server 
8025-1 along with the corresponding the ICS user address, as part of 
the address-related information. 

The speed class is a system where the communication speed is 
represented with numeric values or the like, instead of with units of 
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speed. For example, the communication speed of 64 Kbps is Class 1, 
the communication speed of 128 Kbps is Class 2, and so forth, with 
the communication speed of 500 Mbps being Class 7. The greater the 
number for the communication class is, the greater the speed. FIG. 66 
shows an example of correlation between the communication speed and 
the speed class, but there is no need to make the speed class system 
a 7-class system from "1" to M 7 W . This may be. for example, finely 
divided into a 20-class system, in accordance with progress in 
technology. Also, there is not need for the communication speed to 
accurately match the physical communication speed of the ICS network 
lines within the ICS 8000-1, rather, the system may be made to 
correspond with 25% of the physical communication speed, giving some 
leeway with the communication speed. The degree of priority is 
represented in numeric values, on an 8-tiered system, for example, 
representing the order of priority compared within a single speed 
class for when sending the ICS network frames from the access control 
apparatus or the relay apparatus to the ICS network communication 
line. The greater numeric value representing the degree of priority, 
the.4y.gher the priority. For example, in the event that the relay 
apparatus receives two ICS network frames F510 and F511 at almost the 
same time, and the speed class of the two frames is the same value 
"3". the degree of priority of the ICS network frame F510 is "3". and 
the degree of priority of the ICS network frame F511 is "5". the 
system sends the ICS network frame F511 with higher priority first. 
In the present Embodiment-15 . e.g.. the ICS network 
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communication lines 8030-3 and 8030-4 are "in the same communication 
channel" from the relay apparatus 8020-1 toward the access control 
apparatus 8010-3. and the ICS network communication lines 8030-5 and 
8030-6 are "in the same communication channel" from the relay- 
apparatus 8020-1 toward the access control apparatus 8010-4. The 
communication line may be headed toward the relay apparatus from the 
access control apparatus, or may be headed from one relay apparatus 
toward another relay apparatus connected with the ICS network 
communication line. A plurality of ICS network communication lines 
of the same speed class may be set within the same channel, and in 
this case, the same speed class may be in the same ICS network 
communication line. 
«0peration» 

This operation will now be described with reference to the 
flowcharts in FIGs.67 and 68. 

The user 8400-1 sends the ICS user frame F500 with the sender 
ICS user address "2500" and the receiver ICS user address "3600" to 
the ICS logic communication line 8051-1. The processing device 8012- 
1 of* the access control apparatus 8010-1 receives the ICS user frame 
F500' from the ICS logic terminal with the ICS network address "7721" 
of the line unit 8011-1. and at the same time, obtains the ICS 
network address "7721" (Step S2001) , and checks whether the ICS 
network address "7721" has the request identification thereof 
registered in the conversion table 8013-1 as "3" (virtual dedicated 
line connection) or not (Step S2002) . In this case, the registration 



10 1 



has not been made as such, so next, the receiver ICS network address 
"3600" written in the ICS user frame F500 is obtained in accordance 
with the ICS network address "7721" (Step S2004) , and checks whether 
the ICS network address "3600" has the request identification thereof 
registered in the conversion table as "2 W (inter-corporation 
communication) or not (Step S2005) . In this case, the registration 
has been made, so next, the receiving ICS network address "5522" is 
obtained from the conversion table 8013-1 as preparation to perform 
the ICS encapsulation, and accounting-related information, namely 
"speed class "3" and "degree of priority "3", is obtained from the 
conversion table. 8013-1 (Step S2006) . Next, the ICS encapsulation is 
performed by generating an ICS network frame F510 written therein 
with "speed class "3" and degree of priority "3" (Step S2020) . which 
is sent to the ICS network communication line 8030-1 (Step S2021) . 

Although the above explanation has been made with regard to 
the inter-corporation communication wherein the request 
identification of the ICS network frame is set at "2" (inter- 
corporation communication) , in the event that the request 
identification thereof is "3" (virtual dedicated line connection), 
the ^receiving ICS network address, speed class, degree of priority 
and the like are obtained from the conversion table 8013-1, and 
further, information relating to account is obtained (Step S2003) . 
In the event that the request identification thereof is "1" (intra- 
corporation communication), the receiving ICS network address, speed 
class, degree of priority and the like are obtained from the 
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conversion table 8013-1, and further, information relating to account 
is obtained (Step S2011) . In the event that the request 
identification thereof is M 4" (communication to an ICS network 
server), the receiving ICS network address and the like are obtained 
from the conversion table 8013-1, and further, information relating 
to account is obtained (Step S2013) , following which this is sent to 
the ICS network server 8027-1 after encapsulation. 

The ICS network frame F510 formed thus reaches the relay- 
apparatus 8020-1 via the ICS network communication line 8030-1. Let 
us say that now, another ICS network frame F511 reaches the relay 
apparatus 8020-1 via the ICS network communication line 8030-2, at 
almost the same time. This ICS network frame F511 has been sent from 
the user 8400-2 as an ICS user frame F501, has arrived at the access 
cbntrol apparatus 8010-2 via the ICS logic communications line 8052- 
1. been ICS encapsulated at that point to become the ICS network 
frame F511 there, and reached the relay apparatus 8020-1 by being 
sent via the ICS network communication line 8030-2. Upon receiving 
the ICS network frame F510 and the ICS network frame F511 (Step 

52030) . the relay apparatus 8020-1. under the administration of the 
processing device 8021-1. first checks the relay table 8022-1 to 
decide which network communication line to use for the ICS network 
frames F510 and F511. i.e., finds communication channels (Step 

52031) . and separates these by channel (Step S2032) . With the 
present Embodiment-15. both of the two ICS network frames F510 and 
F511 have a transmission destination of the communication channel 
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from the relay apparatus 8020-1 to the control apparatus 8010-3, and 
two ICS network communication lines exist, namely, the ICS network 
communication line 8030-3 and 8030-4. Next, the relay apparatus 8020- 
1 reads the speed class described in the control field of the two ICS 
network frames F510 and F511, and separates the ICS network frames by 
speed class (Step S2041) . Hereafter, the procedures are performed 
separately for each separated speed class. 

In the case of the present Embodiment-15 . the speed class of 
the two ICS network frames F510 and F511 are both "3". Next, with 
the ICS frames of the same speed class, the degree of priority 
described in the control portion of the two ICS network frames is 
read for each, and the ICS frame with the higher priority is sent 
first (Step S2042) . If the degree of priority is the same, either 
may be sent first. As a result of the above process, the relay 
apparatus 8020-1 sends the ICS network frame F511 first over the ICS 
network communication line 8030-3, and subsequently sends the ICS 
network frame F510 over the ICS network coGamunication line 8030-3. 

Incidentally, in the above procedures, in the event that the 
onl^ICS network communication lines available are of a commtmication 
speed slower than the speed class described in the control field of 
the ICS network frame F510, information regarding slower service due 
to slower speeds, i.e., the sender ICS user address and the receiver 
ICS user address to be described in the relevant ICS network frame, 
the time to communications service (year, month, day, hour, minute, 
second), etc., are described in the relay operating file 8023-1. The 
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recorded contents of the relay operating file 8023-1 are notified to 
the user according to requests of the ICS 8000-1. 

According to the above procedures, of the two ICS network 
frames F511 and F510. the ICS network frame F511 with the higher 
priority leads time-wise, and reaches the access control apparatus 
8010-3. having been transferred through the ICS network communication 
line 8030-3. The ICS network frame F511 is subjected to the ICS 
reverse-encapsulation, becomes the ICS network frame F501. and 
reaches the user 8400-4 with the ICS user address "3610- via the ICS 
logic communication path 8053-1. The ICS network frame F510 is 
subjected to the ICS reverse-encapsulation, becomes the ICS network 
frame F500. and reaches the user 8400-3 with the ICS user address 
"3600" via the ICS logic communication path 8053-1. 

Next, options will be described regarding how to user the 
degree of priority. In the event that the speed class and the degree 
of priority recorded in the conversion table 8013-1 are to be copied 
to the ICS network frame at the point of the ICS encapsulation, the 
processing device 8012-1 checks the length written in the ICS user 
fratte control field which is to be processed, and only in the event 
that the ICS user frame is equal to or shorter than the predetermined 
value (e.g.. 256 bytes) for example, a value with value representing 
the degree of priority incremented by "1" is copied to the ICS 
network frame. Thus, in the limited case of short ICS user frames, 
the ICS user frames can be transferred within the ICS 8000-1 with 
priority. This, the ICS 8000-1 operator is able to easily realizes 
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service wherein the priority of short ICS user frames is raised, 
i.e.. the communication service with raised communication charges. 
As for the users, the short ICS user frames increases the surety of 
throughput. Whether or not the option is used is determined 
separately for each access control apparatus , for example. 

A method may be employed wherein only the speed class is 
iepleaented. and the above method is executed without the degree of 
priority, i.e., with all ICS user frames at the same degree of 
priority. With other embodiments, the conversion table 8013-1 does 
not include the sender ICS user address (intra-corporation and inter- 
corporation) . In these cases as well, there is no change, since the 
flowchart shown in FIG. 67 does not refer to the sender ICS user 
address, anyway. 

Embodiment-16 (Assignment of electronic signature to ICS user frame) : 

An embodiment will now be described wherein ICS user frames 
are electronically signed, and wherein there is proof that an ICS 
user frame has passed through an access control apparatus. Also, the 
emtibdiment will now be described wherein the ICS user frames are 
encrypted upon request. First, description will be made regarding 
the electronic signature technology used in the present embodiment. 
In order for an electronic signature to be used, there is a signer to 
form the electronic signature and a verifier to verify the electronic 
signature. The signer simultaneously forms a pair of keys, signature 
key KSa and verification key KPa. The signer keeps the signature key 
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KSa undisclosed, and discloses the verification key KPa one way or 
another. The signer M a M uses the secret signature key KSa held by 
the signer "a" lone to form an electronic signature a which 
dependent on data m and the signature key KSa. This is shown in the 
following expression (1) 

a - SIGN (KSa. h (m) ) (1) 

Now, "SIGN" is a signature function representing the function of the 
signature, with the function y = h (m) being a hash function for 
electronic signing having a function for compressing the data m into 
short data. The verifier "b" uses the disclosed verification key KPa 
and verifies the authenticity of the electronic signature a , 
according to the following: 

v = TEST (<7 t KPa, h (m) ) (2) 
Then in the event that v » 1, this indicates that the electronic 
signature a and the data m are both correct, that the electronic 
signature a and the data m have not been re-written following 
generation of the electronic signature a , and that there are been no 
unauthorized tampering. In the event that v =0, this indicates 
thalr-*the either one or both of the electronic signature a and the 
data*m are not correct. The verification key KPa is widely disclosed 
by a : public key information service forms which performs services 
such as operational reports and information of public keys, or by 
general advertisements. The art for forms the signature function 
SIGN which makes calculation of the signature key KSa practically 
impossible even with disclosure of the verification key KPa, is of 
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public knowledge. 

Next, the procedure for assigning an electronic signature to 
the ICS user frame will be described. The objects of the electronic 
signature are the following: a "time/ location parameter Fl w 
representing conditions relating to the time or place of providing 
the electronic signature, i.e., the year/month/day /hour/minute/second 
of electronic signing, the operator of the access control apparatus, 
or the identification code of the access control apparatus, and the 
"signature function parameter P2" representing the signature function 
SIGN, the type of the hash function h (m) . or the length of the 
signature key. In a numerical expression, this is expressed in. the 
following expression (2): 

a - SIGN (KSa. h (m)) -(3) 

wherein m = UF II PI II P2 . 
Now, UF represents the ICS user frame before the ICS encapsulation, 
or the ICS user frame restored to the original form after the ICS 
reverse-encapsulation. The user on the receiving side receives the 
ICS user frame UF, the time/ location parameter PI, the signature 
funo^ion parameter P2, and electronic signature a to the ICS user 
frame on the receiving side as UF II PI II P2 I a . This is 
illustrated in FIG. 69. Further, there is a method wherein the area 
for writing the parameters PI and P2, and the electronic signature a 
within the ICS user frame UF is left blank, as shown in FIG. 70. In 
this case, the electronic signature a is generated such as can be 
represented as follows, with the open area in the ICS user frame UF 
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represented by "Data" : 

a = SIGN (KSa. h (m)) (4) 
wherein m = Data II PI II 
Verification of the signature is performed as follows: 

v = TEST (<7 . KPa, h (m)) (5) 
wherein m = Data II PI II P2. 
Further, in the event of the ICS user frame UF is 2048 bytes 
in length, for example, and the length of UF II PI II ' P2 II a is 2448 
bytes (2048 bytes + 400 bytes), there arises the necessity to re- 
write the field representing the frame length within the control 
field of the ICS user frame UF (e.g.. the total-length field shown in 
FIG. 3) from 2048 bytes to 2448 bytes. Thus, the re-written ICS user 
frame is represented as UF' . In the event that such an embodiment is 
employed, the electronic signature a is represented as follows: 

a = SIGN (KSa, h (m)) (6) 

wherein m = UF' II PI II P2. 
Verification of the signature is performed as follows: 

v = TEST (C7 . KPa. h (m)) (7) 

wherein m = UF' II PI II P2 . 
In the present Embodiment- 16 . UF. PI and P2 may be re- 
organized regarding the order thereof, so as to calculate, e.g.. the 
electronic signature a - SIGN (KSa. h (m)) as m - PI II P2 II UF. 
and set PI II P2 II UF II a within the ICS user frame of the 
receiving side. In the present embodiment, the encrypting function 
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is represented as y = ENC (Kl. x) . and the decrypting function is 
represented as x = DEC (K2. y) . Here, "x" represents plaintext data, 
"y" represents ciphertext data. ENC represents an encryption 
function. DEC represents a decryption function. Kl represents an 
- encryption key, and K2 represents a decryption key. The art of 
electronic signature is also called digital signature, and is 
described in. e.g., "New Direction in Cryptography" (paper by W. 
Diffie and M. E. Hellman. IEEE IT. Vol. IT-22 No. 6, pp. 644-654. 
1976). and "Encryption and Information Security" (Shigeo Tsujii. 
1990. Shokodo. pp. 127-138) . 
«Conf iguration» 

.As shown in FIG. 71. the ICS 9000-1 includes access control 
apparatuses 9010-1. 9010-2 and 9010-3. and relay apparatus 9120-1. 
these apparatuses being connected by ICS network communication lines 
9030-1. 9030-2 and 9030-3 which transfer ICS network frames. The 
line unit 9011-1. the processing device 9012-1. the conversion table 
9013-1 and the electronic signature unit 9017-1 are all provided 
within the access control apparatus 9010-1. Provided within the 
electronic signature unit 9017-1 are the following: program modules 
for realizing the signature key KSa. the verification key KPa. the 
electronic signature function SIGN and the hash function h (m) . the 
time/location parameter PI, and the signature function parameter P2 . 
Now. the signature key KSa is a secret value held by the access 
control apparatus 9010-1. and the electronic signature unit has the 
secret signature key therewithin. so there is the necessity to 

110 

BNSDOCID: <GB 2320167A_I_> 



prevent the secret signature key from leaking out. For example, the 
electronic key unit may be stored inside a physically strong box, 
structured such that the signature key cannot be read from the 
outside. The plurality of ICS logic terminals of the line unit 9011- 
1 are provided with the ICS network addresses "7721". "7722". "7725", 
"7726". "7727" and "7728". An example of the conversion table 9013-1 
is shown in FIG. 72. 

The encryption/decryption means 9018-1 includes encryption 
functions, and holds the encryption key Kl and the decryption key K2. 
When an ICS user frame UF1 is inputted, the ciphertext UF2 is 
generated as UF2 = ENC (Kl. UF1) . and when the ciphertext UF 2 is 
inputted, the plaintext thereof is obtained as UF1 = DEC (K2 , UF2) . 
«0peration» 

This operation is described with reference to the flowchart 
shown in FIG. 73. The user 9400-1 sends the ICS user frame F900 with 
the receiver ICS user address "3600" to the ICS logic communication 
line 9051-1. The processing device 9012-1 of the access control 
apparatus 9010-1 receives the ICS user frame F900 from the ICS logic 
terminal with the ICS network address "7721" of the line unit 9011-1. 
and' at the same time, obtains the ICS network address "7721" (Step 

52001) and checks whether the ICS network address "7721" has the 
request identification thereof registered in the conversion table 
9013-1 as "3" (virtual dedicated line connection) or not (Step 

52002) . In this case, the registration has not been made as such, so 
next, the receiver ICS network address "3600" written in the ICS user 
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frame F900 is obtained in accordance with the ICS network address 
"7721" (Step S2004) , and checks whether the ICS network address 
"3600" has the request identification thereof registered in the 
conversion table as "2" (inter-corporation communication) or not 
(Step S2005) . In this case, the registration has been made, so next, 
the receiving ICS network address "5522" is obtained from the 
conversion table 9013-1 as preparation to perform the ICS 
encapsulation . 

Next, information related to accounting for the speed class 
and the degree of priority is obtained from the conversion table 9013- 
1 (Step S2006). The value "1" is specified in the signature space in 
the conversion table 9013-1, and also "YES" is recorded in the space 
for electronic signature transmission, so the processing device 9012- 
1 uses the program modules for realizing the electronic signature 
function SIGN and the hash function h (m), the time/ location 
parameter PI, and the signature function parameter P2 stored in the 
electronic signature unit 9017-1. and using the electronic signature 
method described above, generates an electronic signature for the ICS 
us££, frame F900. and forms a new ICS user frame (represented by UF2) 
(Step S2019) . This is represented in an expression (8) as follows: 

UF2 = m II a (8) 

wherein m = F900 II PI II P2. 

a « SIGN (KSa, h (m) ) . 
In the above procedures, even if "1" is specified in the signature 
space in the conversion table 9013-1. if "NO" is recorded in the 

1 1 2 



23201 67A_I > 



ICS user frame (UF1) obtained by the ICS reverse encapsulation is 
deciphered using the encryption/decryption means 9018-1. thus 
obtaining an ICS user frame UF1' . Here. UF1' = DEC (K2. UF1) holds, 
and in the event that the encryption class is "6". encryption is not 
performed . 

Next, since the value "1" is specified in the signature space 
in the conversion table 9013-1. and also "YES" is recorded in the 
space for the electronic signature transmission, so the electronic 
signature unit 9017-1 operates, and provides the ICS user frame with 
the parameters PI and P2 and the electronic signature a , thus 
forming a new ICS user frame F932. This is representee! as follows: 

F932 = m II o . m = UF1 II Pill P2 

electronic signature a = SIGN (KSa. h (m) ) (9) 
and in the event that the aforementioned encryption has been 
performed. UF1* is used instead of UF1. In the above procedures, 
even if the value "1" is specified in the signature space in the 
conversion table 9013-1. if "NO" is recorded in the space for 
electronic signature transmission, an electronic signature is not 
provided. The ICS user frame F932 reaches the user 9400^4 with the 
ICS user address "2510" via the line unit 9011-1 and the ICS logic 
communication path 9051-4. 
«In the case of signature request» 

In the event that an ICS user frame F940 with a sender ICS 
user address "2800" and a receiver ICS user address "3700" is 
inputted from the line unit 9011-1. the request identification 
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corresponding to the ICS network address "7728" is "2*\ the value "0" 
is specified in the signature space in the conversion table 9013-1 
corresponding to the receiver ICS user address "3700", and at the 
same time "YES" is recorded in the space for the electronic signature 
transmission. Then, since the value "1" is specified in the 
signature request space in the ICS user frame F940, the electronic 
signature unit 9017-1 operates, and forms a new ICS user frame 
provided with the parameters PI and P2 and the electronic signature 
a . 

In a case that the signature space in the conversion table 
9013-1 is either "0" or T and "NO" is recorded in the space for the 
electronic signature transmission, an electronic signature is not 
provided before the ICS encapsulation, even if the value "1" is 
specified in the signature request space in the ICS user frame F940. 
In the same way, in a case that the signature request space in the 
conversion table 9013-1 is either M 0" or "1" and "NO" is recorded in 
the space for the electronic signature reception of the ICS user 
frame, an electronic signature is not provided after the ICS reverse 
encapsulation , even if the value "1" is specified in the signature 
space i n conversion table 9013-1. 

On the other hand, in the event that the ICS user frame is to 
receive the electronic signature at the time of sending by the 
transmitting side access control apparatus, and further is to receive 
the electronic signature by the receiving side access control 
apparatus, an transmitting electronic signature and a receiving 
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electronic signature are assigned, as shown in FIG. 74. Also, there 
are other examples wherein the value of the verification key KPa is 
included in the signature function parameter P2. Thus, the trouble 
of the ICS user frame receiver obtaining the verification key KPa 
from the public key information center or the like can be omitted. 
Further, in the event that the contents of the ICS user frame is an 
electronic bill (order slip, receipt, etc.). an electronic signature 
is attached to the electronic bill, along with the identification 
code of the access control apparatus through which the electronic 
bill has passed. In the event that either the sender (former) of the 
electronic bill, of the receiver (recipient) tampers with the 
electronic bill, the tampering can be discovered by means of the 
electronic signature principle. Accordingly, as long as the- ■ 
electronic signature key is a secret value, i.e., as long as the 
operator of the access control apparatus which holds the signature 
key therein ensures that the signature key is a secret value, the 
electronic signature can be used as a tamper-proof public system. 

Embodiment-17 (Electronic signature server and encryption server) : 

As shown in FIG. 71 of Embodiment-16. the electronic signature 
unit 9017-1 and the encryption/decryption means 9018-1 are situated 
within the access control apparatus 9010-1- Conversely, with the 
present embodiment, as shown in FIG. 75. the access control 
apparatuses 9310-1. 9310-2. 9310-3 and 9310-4 do not include an 
electronic signature unit therewithin. Instead, electronic signature 
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servers 9340-1, 9340-2. 9340-3 and 9340-4 and ICS network 
communication lines 9341-1 , 9341-2, 9341-3 and 9341-4 are connected, 
respectively. Each electronic signature server includes the 
functions of the electronic signature unit described in the 
Embodiment-16. and the manner of operation wherein electronic 
signatures are provided before the ICS encapsulation or providing 
electronic signature after the ICS reverse encapsulation in 
cooperation with the access control apparatus is the same as the 
function of the electronic signature unit 9017-1 described in the 
Embodiment-16. with signature key, verification key, electronic 
signature function, program module for realizing the hash function, 
time/location parameter and signature function parameter. The 
electronic signature servers 9342-1 and 9342-2 are connected to the 
relay apparatuses 9320-1 and 9320-2 via the ICS network communication 
lines 9344-1 and 9344-2, respectively. The electronic signature 
server has an ICS network addresses unique in the entire ICS network, 
and has the function of communication with other electronic signature 
servers or access control apparatuses using the ICS network server 
complication function, thereby mutually exchanging the information 
that; each has. The electronic signature server 9342-1 is an 
electronic signature server representing the VAN 9301-1, which 
communicates with the electronic signature servers 9340-1 and 9340-2 
within the VAN 9301-1 using the ICS network server communication 
function, and is capable of obtaining information held by the 
electronic signature servers. Also, the electronic signature server 
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9340-1 is capable of obtaining information relating to electronic 
signature held by the electronic signature server 9340-2 (such as a 
verification key) , via the electronic signature server 9342-1. The 
electronic signature server 9342-1 is capable of communicating with 
the electronic signature server 9342-2 which represents another VAN 
9301-2 using the ICS network server communication function, thereby 
mutually exchanging the information relating to electronic signature 
that each has. The electronic signature servers do not exchange 
information regarding the secret signature keys held therewithin, and 
tightly guard the secrecy of the signature keys. 

Further, with the present embodiment, as shown in FIG. 75, the 
access control apparatuses 9310-1; 9310-2' 9310-3 and 9310-4 do not 
include encryption/decryption means therein. Instead, a connection 
is made with the encryption servers 9343^1; 9343-2. 9343-3 and 9343- 
4. via respective ICS network communication lines. Each encryption 
server has the functions of the aforementioned encryption/decryption 
means 9018-1. and the manner of operation wherein the encryption of 
the ICS use frames is provided before the ICS encapsulation or the 
decryption of the encrypted ICS user frames after the ICS reverse 
encapsulation in cooperation with the access control apparatus is the 
same as the function of the encryption/decryption means 9018-1, with 
program module for realizing the encryption function and the 
decryption function, the encryption key and the decryption key. The 
encryption servers 9343-5 and 9343-6 are connected to the relay 
apparatuses 9320-1 and 9320-2 via the ICS network communication 
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lines. Each encryption server has an ICS network addresses unique in 
the entire ICS network, and has the function of communication with 
other encryption servers or the access control apparatuses using the 
ICS network server communication function, thereby mutually 
exchanging the information that each has. The encryption server 9343- 
5 is an encryption server representing the VAN 9301-1. which 
cossunicates with the encryption servers 9343-1 and 9343-2 within the 
VA& 9301-1 using the ICS network server communication function, and 
is capable of obtaining the information held by the encryption 
servers. Also, the encryption server 9343-1 is capable of obtaining 
the information relating to the encryption held by the encryption 
server 9343-2 (such as an encryption key), via the encryption server q 
9342-5. The encryption server 9343-5 is capable of communicating 
with the encryption server 9343-6 which represents another VAN 9301-2 
using the ICS network server communication function, thereby mutually 
exchanging the information that each has . 

Embodiment-18 (Open connection) : 

Description will now be made regarding the ICS open 
connection, i.e.. preparatory procedures performed by the user and 
the VAN operator operated in order to change the other party and 
conduct the inter-corporation communication. 
«User application» 

The user applies to the VAN operator for an ICS name and an 
ICS user address, and at the same time, shows ICS connection 
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conditions, a user identification and a payment method (address, 
corporation name, paying bank account, etc.). If there is the ICS 
user address for intra-corporation communications that the user has 
decided, this is also shown, but not if there is none. The VAN 
operator follows common rules decided upon beforehand with other VAN 
operators, and decides upon the ICS name and the ICS user address and 
informs the user thereof. The items for the ICS connection 
conditions include ICS name conditions, communication band 
conditions, accounting conditions, electronic signature conditions, 
encryption conditions, open-zone conditions and dynamic conditions, 
with the contents of these conditions being as describe below. 

the ICS name conditions specify only the left portion of the 
ICS name. For example, in the event that the ICS name is 
"USR#1.ACS#1.DIS#1.VAN#1.JP.AS". the user specifies only the leftmost 
"USR#1" (the VAN operator decides upon the remaining right portion) . 
The communication band conditions are speed class and degree of 
priority. The accounting conditions are determined regarding charges 
for a fixed amount for a certain time span, charges for network usage 
(netWk accounting) . or charges for the contents of information sent 
and 'received via electronic communication (information account), in 
relation to communication band conditions, signature conditions, 
encryption conditions, etc. The electronic signature conditions 
specify whether or not to provide an electronic signature which can 
prove with the date and time the face that the ICS user frame has 
passed through the access control apparatus. The encryption 
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conditions specify whether or not the encryption is performed when 
the ICS user frame is transferred. The open-zone conditions specify 
whether or not to reject at the access control apparatus, an ICS 
frame received from an unknown sender not registered in the 
conversion table, or whether to form a temporary conversion table and 
receive, etc. The dynamic alteration conditions specify the 
functions which can be changed upon request by the user via ICS 
frames, regarding the above-described conditions. The dynamic 
alteration conditions are set so that the signature conditions or the 
encryption conditions can be changed, but items important for VAN 
operation cannot, such as ICS addresses or accounting. 
<<ICS address administration server and ICS name server» 

Describing with reference to FIG. 76 and FIG. 77 to show the 
conversion table 11113-1, FIG. 78 to show the conversion table 
template. FIG. 79 to show the correlation table and FIG. 80 to show the 
ICS name server, according to the present embodiment, inside the ICS 
11000-1 are provided the following: access control apparatuses 11110- 
1, 11110-2 and 11110-3. relay apparatus 11116-1, ICS address 
administration servers 11150-1 and 11150-2, ICS name servers 11160-1 
and 11160-2. ICS conversion table servers 11170-1 and 11170-2. and 
users 11132-1 and 11132-2. The ICS address administration server 
11150-2 has in the correlation table contained therein the ICS 
network address "8210", ICS user address "4200 and user address 
related information, of the user 11132-2. The ICS name server 11160- 
2 has in the ICS name conversion table contained therein the ICS name 
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"USR#3.ACS#3.DIS#3.VAN#3.JP.AS" and the ICS user address "4200". of 
the user 11132-2. The VAN operator decides upon an ICS network 
address ("7777") to use in accordance with the ICS user address 
"3333" of the user 11132-1. provides it to the ICS logic terminal 
11111-2 of the access control apparatus 11110-1. and connects the ICS 
logic communication path 11133-1 which connects the user 11132-1 via 
the gateway 11000-2. The ICS network address "7777" is a non- 
disclosed value, so the user is not notified of it. 

Next, the VAN operator directly writes the following items in 
the correlation table 11152-1 within the ICS address administration 
server 11150-1. and in the conversion table 11152-1 via the data path 
11153-1 and the processing device 11151-1: the ICS network address 
"7777" determined by the method described above, the ICS user address 
(inter-corporation) "3333", the ICS user address indicated by the 
user (intra-corporation) "1111", and user address related 
information, i.e., communication band conditions, account conditions, 
electronic signature conditions, encryption conditions, open-zone 
conditions, dynamic alteration conditions, user identification, 
payment method, etc. The VAN operator further directly writes the 
following in the ICS name conversion table 11162-1 in the ICS name 
server 11160-1. via the data path 11163-1 and processing device 11161- 
1: the ICS name "USR#1 .ACS#1.DIS#1.VAN#1 . JP.AS" decided as described 
above, the ICS user address "3333". and type "1" (indicating that the 
ICS user address "3333" is registered in the ICS name conversion 
table 11162-1). The above results expressed are as shown by the 



12 3 



correlation table 11152-1 and the ICS name conversion table 11162-1 

At the point that the above-described writing of the various 
types of information to the new user is completed, the ICS address 
administration server 11150-1 and the ICS name server 11160-1 use the 
ICS network ICS communication functions to communicate with the 
respective network addresses "8910" and "8920" to notify the ICS 
conversion table server 11170-1 that information has been obtained 
regarding the ICS address and the ICS connection conditions of a new 
user. Now. the ICS conversion table server 11170-1 is a type of the 
ICS network server, and in the present embodiment has an ICS network 
address "8100" and an ICS user address "2100". 
«ICS conversion table server» 

The ICS conversion table server 11170-1 reads the information 
described in the correlation table 11152-1 of the ICS address 
administration server 11150-1 using the ICS network communication 
functions, and writes it in the conversion table template 11172-1. 
That is, "7777" is written to the space for the transmitting ICS 
network address (intra-corporation) , M llll" is written to the space 
for-^Jie sender ICS user address (inter-corporation), and "3333" is 
written to the space for the sender ICS user address (inter- 
corporation) . In the event that there is no ICS user address for the 
intra-corporation communication, the space for the sender ICS network 
address (intra-corporation) is left blank. The request 
identification number is set at "2" which indicates inter-corporation 
communication. The other settings for the present embodiment are as 
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follows: the communication band conditions are set. to the speed class 
of "3" and the degree of priority "3", the electronic signature 
conditions are set to "1". the transmitting signature specification 
is "YES" . the receiving signature specification is "NO", and the 
account conditions are accounting class "4". the present embodiment 
using an example of fixed charging system. The encryption conditions 
are the encryption class "1". with the present embodiment being 
arranged so as to specify the encryption of the ICS network frames 
within the ICS. The open-zone class of the present embodiment is 
"0" . The dynamic alteration class "6" in the present embodiment 
allows for the transmitting signature item to be changed upon request 
by the user. 

«Usage of the ICS conversion table server (user) » 

The user 11132-1 writes "3333" as the sender ICS user address 
and the ICS user address "2100" of the ICS conversion table server 
11170-1 as the receiver ICS user address, and sends the ICS user^ 
frame F1200 written with the receiver information (receiver ICS user 
address or receiver ICS name) written to a user data portion of the 
ICS* user frame. The ICS conversion table server 11170-1 receives the 
ICS user frame F1200 via the access control apparatus 11110-1. and 
obtains the receiving ICS network address for the inter-corporation 
communication according to whether the receiver information in the 
user data portion is a receiver ICS user address of a receiver ICS 
name, using the method described below. Further, in the event that 
the receiver ICS name has been specified, the receiver ICS user 
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address is also obtained. 

(In the event there is specification of receiver ICS user address) : 

In the event that the aforementioned receiver information is 
the receiver ICS user address "3800". the ICS conversion table sever 
11170-1 by using the ICS network communication function inquires the 
ICS address administration server 11150-1 connected to the access 
control apparatus 11110-1, and obtains the ICS network address *7600 w 
(receiving ICS network address) corresponding to the ICS user address 
"3800 Also, in the event that the receiver ICS user address is not 
found in the correlation table 11152-1 (failure to find the ICS 
network address) , the ICS conversion table server 11170-1 receives a 
"notification of failure to find the ICS network address" from the 
ICS address administration server 11150-1. 
(In the event that the receiver ICS name is specified): 

In the event that the above receiver information is the 
receiver ICS name "USR#3.ACS#3.DIS#3.VAN#3. JP.AS" . the ICS conversion 
table server 11170-1 by using the ICS network communication function 
sends the ICS name M USR#3.ACS#3.DIS#3.VAN#3. JP.AS" to the ICS name 
seizor 11160-1 connected to the same access control apparatus 111 10- 
1. The ICS name server 11160-1 holds the ICS network addresses of 
other ICS name servers in a form corresponding to the ICS name (the 
portion of the ICS name after removing the leftmost portion "USR#n"). 
and in the present embodiment, the ICS name server 11160-1 searches 
the ICS name conversion table 11162-1, finds the ICS network address 
-8930" of the ICS name server 11160-2 administrating 
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M ACS#3.DIS#3.VAN#3. JP.AS" and inquires regarding the address "8930". 
using the ICS network communication functions, and obtains the ICS 
user address "4200" (receiver ICS user address) and the ICS network 
address "8210" (receiving ICS network address) corresponding to the 
aforementioned ICS name "USR#3.ACS#3.DIS#3.VAN#3. JP.AS" . In the 
above procedures, the ICS name server 11160-2 has contacted the ICS 
address administration server 11150-2 regarding the ICS network 
address of the user 11132-2, and obtained the address "8210". 
(Completion of the conversion table 11113-1) : 

In the event that the receiver ICS user address is specified, 
the ICS conversion table server 11170-1 adds the receiver ICS user 
address "3800" and the receiving ICS network address "7600" to the 
conversion table 11113-1. thus completing the portion of the 
conversion table 11113-1 corresponding to the receiving user. In the 
event that the receiver ICS name is specified, the ICS conversion 
table server 11170-1 adds the receiver ICS user address "4200" and 
the receiving ICS network address "8210" to the conversion table 
11113-1. thus completing the portion of the conversion table 11113-1 
corresponding to the receiving user. Also, in the event that a 
"notification of failure to find the ICS network address" is received 
from the ICS address administration server 11150-1 or the ICS name 
server 11160-1. the ICS conversion table server 11170-1 sends an ICS 
frame indicating failure to add to the conversion table, to the 
requesting user 11132-1. 

«0ther usage of the ICS conversion table server (user)» 
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The user 11132-1 requests a notification of the user-specific 
information to the user, by means of sending an ICS user frame 
written with a request for the notification of the contents of user- 
specific information in the conversion table 11113-1 to the ICS 
conversion table server 11170-1. Further, the user can use a dynamic 
alteration class which has been agreed on beforehand with the VAN 
operator to re-write a part of the conversion table 11113-1. The 
dynamic alteration class is decided upon as 1, 2, .... and the 
contents thereof being as follows: the dynamic alteration class 1 is 
a specification for increasing the user-specific degree of priority 
by "1", the dynamic alteration class 2 is a specification for 
decreasing the user-specific degree of priority by "1", and the 
dynamic alteration class 3 sets the transmitting signature to "YES", 
and at the same time, specifies changing the encryption class to "2". 
«Usage of the conversion table» 

The method of using the conversion table formed according to 
the above procedures has been described in the Embodiment-1 and so 
forth. Although in the Embodiment-1 , description was made regarding 
the.^thod of forming a temporary conversion table if there is no 
conversion table at the time that the access control apparatus 
receives the ICS network frame and is to perform the ICS reverse 
encapsulation thereof, but with the present embodiment, the open-zone 
class of the conversion table will be used. That is, at the time 
that the access control apparatus receives the ICS network frame and 
is to perform the ICS reverse encapsulation thereof, in the event 
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that the received "pair of receiving ICS network address and 
tansmitting ICS network address contained in the network control 
field of the ICS network frame" has not been registered in the 
conversion table as a "pair of transmitting ICS network address and 
receiving ICS network address" . a temporary conversion table is set 
in the same manner as with the aforementioned embodiment in the event 
that the open-zone class is set to "2", but in the event that the 
open-zone class is set to "1". a temporary conversion table is not 
set. Further, in the event that the open-zone class is set to "0". 
not only is a temporary conversion table not set, but the received 
ICS network frame is discarded. In this case, the ICS user frame is 
not delivered to the user. That is, in the event that the open-zone 
class is set to "0", reception of an unknown sender not registered in 
the conversion table is rejected, thus realizing what is called a 
"closed connection". Incidentally, in the above, in the event that 
the request identification is "4". the open-zone class is always 
handled as being set to "1". i.e.. a temporary conversion table is 
no$ set. 

«Variations of the embodiment» 

The method for the VAN operator to use the data path 11153-1 
and the data path 11163-1 to input the ICS addresses, the ICS 
connection conditions and the like to the ICS address administration 
server 11150-1 and the ICS name server 11160-1 has been described 
with regard to the above embodiment. Instead, the arrangement may be 
such that the VAN operator does not use these data paths, but rather 
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forms a special ICS network server within the ICS 11000-1, so as to 
directly input the ICS addresses, the ICS connection conditions and 
the like to the ICS address administration server 11150-1 and the ICS 
name server 11160-1, using the ICS network communication function, 
thus re-writing the contents of the conversion table 11152-1 and the 
ICS name conversion table. 

Embodiment-19 (Separation of functions of the access control 
apparatus) : 

As shown in FIG. 76 of the Embodiment-18, the ICS address 
administration server 11150-1. the ICS name server 11160-1, and the 
ICS conversion table server 11170-1 are each connected to the access 
control apparatus 11110-1. with the ICS encapsulation and the ICS 
reverse encapsulation being performed within the access control 
apparatus 11110-1 using the conversion table 11113-1. Conversely, 
with the present embodiment, the functions of the access control 
apparatus 11110-1 are separated into an aggregation access control 
apparatus 14110-1 and a plurality of simplified access control 
apparatuses 14210-1, 14210-2 and 14210-3. That is. as shown in 
FIG*81. the access control apparatus 11110-1 is connected to the 
simplified access control apparatuses 14210-1. 14210-2 and 14210-3. 
via respective ICS network communication lines 14190-1. 14190-2 and 
14190-3. The ICS address administration server 14150-1. the ICS name 
server 14160-1. the ICS conversion table server 14170-1. the ICS 
accounting server 14180-1, the electronic signature server 14181-1. 
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the encryption server 14182-1. the operation administration server 
14183-1 and the ICS network server 14184-1 are connected with the 
aggregation access control apparatus 14110-1 via the respective ICS 
network communication lines 14191-1. 14191-2. 14191-3. 14191-4. 14191- 
5. 14191-6. 14191-7 and 14191-8. Further, the conversion table 11113- 
1 within the access control apparatus 11110-1 is separated into an 
aggregation conversion table 14113-1 and a plurality of simplified 
conversion tables 14213-1. 14213-2 and 14213-3. An example of the 
aggregation conversion table 14113-1 is shown in FIG. 82 and an 
example of the simplified conversion table 14213-1 is shown in 
FIG. 83. 

However, part of the aggregation conversion table and 
simplified conversion tables overlap. That is. the following four 
items are contained in both conversion tables : transmitting ICS 
network address, request identification, speed class and degree of 
priority. There is no fundamental difference between the temporary 
partial conversion table 14214-1 with the temporary conversion table 
described with the Embodiment-1 and otherwise, with the items 
contained in the temporary partial conversion table 14214-1 being the 
same as the items contained in the simplified conversion table 14213- 
1. The line unit 14211-1 within the simplified access control 
apparatus 14210-1 has the same functions as the line unit 11111-1 
within the access control apparatuses 11110-1. 

The simplified access control apparatus 14210-1 uses the 
simplified conversion table 14213-1 to perform the ICS encapsulation 
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at a time of sending and the ICS reverse encapsulation at a time of 
receiving, and the aggregation access control apparatus 14110-1 uses 
the aggregation conversion table 14113-1 to perform processing 
relating to the electronic signature and the account, as described 
above. Also, by means of the plurality of simplified access control 
apparatuses 14210-1. 14210-2 and 14210-3 functioning together with 
the aggregation access control apparatus 14110-1, the combined 
functions are the same as those of the access control apparatus 11110- 
1 . The user 14132-1 sends an ICS user frame F1300 with a sender ICS 
user address M 3333 M and a receiver ICS user address "4200" to the ICS 
logic cossmunication line 14133-1. As shown in the flowchart in 
FIG. 84 o the processing device 14212-1 of the simplified access 
control apparatuses 14210-1 receives the ICS user frame F1300 from 
the ICS logic terminal within ICS network address "7777- of the line 
unit 14211-1. and at the same time obtains the ICS network address 
"7777" (Step S2501) , and checks whether or not the address "7777" is 
registered in the simplified conversion table 14213-1 with the 
request identification thereof being "3", indicating a virtual 
dedicated line connection (Step S2502) . In this case, the 
registration has not been made, so the receiver ICS user address 
" 4200" written on the ICS user frame F1300 is obtained corresponding 
to the ICS network address "7777" (Step S2504) . and it is further 
checked whether the address "4200" is registered in the simplified 
conversion table 14213-1 with the request identification thereof 
being "2". indicating inter-corporation communication (Step S2505) . 
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In this case, the registration has been made, so in preparation for 
the ICS encapsulation, the receiving ICS network address "8210" is 
obtained from the simplified conversion table 14213-1 (Step S2506) . 

The simplified access control apparatus 14210-1 next performs 
the ICS encapsulation by means of generating in the ICS network frame 
an ICS network frame F1301 inscribed with the speed class and the 
degree of priority obtained from the simplified conversion table 
14213-1 (Step S2520) . and sending it to the aggregation access 
control apparatus (Step S2521). Now, as described above, the speed 
class T, the degree of priority ""3" and the encryption class "(T 
which are items of the simplified conversion table 14213-1 are 
written to the expansion portion of the ICS network controlling unit . 

the aggregation access control apparatus 14110-1 receives the 
ICS network frame F1301 from the simplified access control apparatus 
14210-1, and based on the face that the ICS network frame F1301 
passes through the aggregation access control apparatus 14110-1, 
forms an account information frame FK01 and sends it to the 
accounting server 14180-1. The information such as the request 
identification, the speed class, the degree of priority, the account 
class and the encryption class which are registered in the 
aggregation conversion table 14113-1 are referred to in order to form 
the account information frame FK01. The signature, transmitting 
signature and receiving signature of the aggregation conversion table 
14113-1 items are used for providing the electronic signature, and as 
described in other embodiments, the electronic signing is performed 



13 3 



by applying for the electronic signature to the electronic signature 
server 14181-1. In the same way, in the event that the encryption 
class specification is "1" which indicates the encryption, the 
encryption is performed by applying the encryption to the encryption 
server 14182-1. Once the above processing has been completed, the 
aggregation access control apparatus 14110-1 sends the ICS network 
frame F1302 to another access control apparatus 14110-2 and other 
aggregation access control apparatuses, via the ICS network 
communication line 14190-4. Incidentally, the format of the ICS 
network frame F1302 changes in content in the event that the 
electronic signature server or the encryption server operate, due to 
an addition of the electronic signatures or a conversion to the 
ciphertext as described above, but if neither the electronic 
signature server nor the encryption .server have operated, the ICS 
network frame F1302 is the same as the ICS network frame F1301. Not 
only can the simplified access control apparatus 14210-1 be realized 
with practically no changes to the existing router, but there are 
other economic advantages such as the number of users contained in 
the^implified access control apparatus 14210-1 not being great, and 
in the event that the users are scattered over a wide geographic 
area, the total number of each of ICS address administration servers. 
ICS name servers. ICS conversion table servers, account severs, 
electronic signature severs and encryption servers can be reduced. 

The operating administration server 14183-1 is provided with 
an ICS network address, is connected to the aggregation access 
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control apparatus 14110-1 and the relay apparatuses, and performs 
exchange with other operation administration servers, access control 
apparatuses. ICS address administration servers, etc. regarding 
information regarding communication conditions within the ICS 
(communication traffic, etc.) or trouble, using the ICS network 
communication functions . 

Now. the item open-zone class included in the simplified 
conversion table 14213-1 of the simplified access control apparatus 
14210-1 is used for the same processing as the processing of the open- 
zone class registered in the conversion table of the access control 
apparatus, as described above. That is. at the time that the 
simplified access control apparatus 14210-1 receives the ICS network 
frame and is to perform the ICS reverse encapsulation thereof, in the 
event that the received "pair of receiving ICS network address and 
transmitting ICS network address contained in the network control 
field of the ICS network frame" has not been registered in the 
simplified conversion table 14213-1 as a "pair of transmitting ICS 
network address and the receiving ICS network address", a temporary 
partial conversion table 14214-1 is set in the aforementioned manner 
in the event that the open-zone class is set to "2". but in the event 
that the open-zone class is set to "1". a temporary partial 
conversion table is not set. Further, in the event that the open- 
zone class is set to "0". not only is a temporary partial conversion 
table not set. but the received ICS network frame is discarded. In 
this case, the ICS user frame is not delivered to the user. In this 
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arrangement, "0" indicates that reception of an unknown sender not 
registered in the conversion table is to be rejected, thus realizing 
what is called a "closed connection" . 

As described in the above embodiment, the ICS address 
administration server and ICS name server may be integrated into a 
single ICS address name administration server, with the aggregation 
access control apparatus being used being connected to the ICS 
address name administration server and ICS network communication 
line. Also, an arrangement may be employed in the above embodiment 
wherein items of the speed class and the degree of priority are not 
provided in the simplified conversion table 14213-1, with a 44 CT being 
written at the point of the ICS encapsulation to the expansion 
portion of the ICS network controlling unit for the speed class and 
the degree of priority, indicating that there is no specification. 
In the same way, an arrangement may be employed wherein specification 
of the open-zone class is not provided in the simplified conversion 
table 14213-1. with a "CT being written to the expansion portion of 
the ICS network controlling unit for the speed class and the degree 
of ^iority. indicating that there is no specification. 

Thus, according to the present invention, administration of 
information communication is performed with a unified address system, 
and various services can be provided, without using dedicated lines 
or the Internet, thus enabling structuring a large-scale 
communication system with high security and with relatively low 
costs. Also, inter-corporation communication can be performed 
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between individual corporations (including government organizations, 
universities, and so forth) which had conventionally been services 
separately with practically no change to the address system for 
computer communications! Further, since the network administrator 
holds the network control authority, the overall administration of 
the network becomes clear, increasing ease of securing reliability 
and also markedly improving security. 



WHAT IS CLAIMED IS: 

1. An integrated information communications system; 
wherein an ICS user frame having a unique ICS user address 

system ADX is converted into an ICS network frame having an address 
system ADS. based on the administration of a conversion table 
provided within an access control apparatus; 

and wherein in the case that transmission is made over at 
least one VAN contained therein following rules of said address 
system ADS. and a destination other access control apparatus is 
reached, conversion is made to said ICS user address system ADX based 
on the administration of said conversion table, and another external 
information communications apparatus is reached. 

2. An integrated information communications system according to 
Claim 1; wherein, in the event that an ICS user frame having said ICS 
user address system ADX is to be transmitted to a network with a 
different address system ADY, said conversion table of said access 
control apparatus is made to contain therein service identification 
to distinguish between an intra-corporation communication and an 
inter-corporation communication, and conversion of address system is 
made per transmission, based on the administration of said access 
control apparatus, thus enabling selection if conversion 
implementation format per user frame. 

3. An integrated information communications system; 
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wherein an ICS user frame having a unique ICS user address 
system ADX is converted into an ICS network frame corresponding to a 
reception ICS network address registered beforehand to the conversion 
table in accordance with a user logic communications line, rather 
than using an ICS user address within said ICS user frame based on 
the administration of a conversion table provided within the access 

control apparatus; 

and wherein in the case that transmission of said ICS network 
frame is made to another access control device via at least one VAN 
following rules of the ICS address system ADS. a transfer destination 
of said ICS network frame being either 1 or N. this is returned to 
said ICS network frame based on the administration of a conversion 
table provided within said access control apparatus, and another 
external information communications apparatus is reached. 

4. An integrated information communications system according to 

Claim 2. comprising a processing apparatus and an ICS net database; 

\ wherein the system is provided with functions such that the 

system replies the results held within in response to a request from 
said access control apparatus, or in the event that the system does 
not have the answer to a query from said access control apparatus, 
the system obtains an answer by means of communication with another 
ICS network server using an ICS net server communication function, 
and replies to a querying access control apparatus of the results 
thereof. 
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5. An integrated information communications system according to 
Claim 2. containing an address administration server having a 
relational table corresponding a relation between the processing 
apparatus and said ICS network address, corresponding to said ICS 
network address . 

6. An integrated information communications system according to 
Claim 5, containing a processing apparatus and an ICS name conversion 
table, which receives proposal of an ICS name from said access 
control apparatus, requests an ICS user address corresponding thereto 
from said ICS name conversion table, notifies said access control 
apparatus of the obtained results, and the access administration 
server writes at least said ICS user address and said ICS network 
address to said conversion table, and also possesses functions for 
returning to the user an ICS user address corresponding to said ICS 
name- 
's 

7 . ~o An integrated information communications system according to 
Claim 5, containing a processing apparatus and an ICS name conversion 
table, which receives proposal of an ICS name from said access 
control apparatus, requests an ICS user address corresponding thereto 
from said ICS name conversion table, notifies said access control 
apparatus of the obtained results, and the access administration 
server temporarily writes at least said ICS user address and said ICS 
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network address to the conversion table, and also possesses functions 
for returning to the user an ICS user address corresponding to said 
ICS name. 



8. An integrated information communications system according to 

Claim 5. containing a processing apparatus and an ICS name conversion 
table, which receives proposal of an ICS name from said access 
control apparatus, requests an ICS user address corresponding thereto 
from said ICS name conversion table, notifies said access control 
apparatus of the obtained results, and possesses functions for 
returning to the user an ICS user address corresponding to said ICS 



name. 



9. An integrated information communications system according to 

either Claim 2 or 3. wherein, in the case that said access control 
apparatus receives an ICS user frame, said access control apparatus 
reads a type of charging system for each ICS frame maintained in the 
cqnversion table based on the ICS user address contained in the ICS 
user* frame, forms account information in the event that the read type 
is of a value indicating a charge-by-quantity charging system, 
notifies the accounting server of the account information in the form 
of an account information frame, but does not forms account 
information nor notify the accounting server of the account 
information in the form of an account information frame in the event 
that the read type is of a value indicating a fixed-charge charging 
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system. 



10. An integrated information communications system according to 
either Claim 2 or 3. comprising an ICS frame database server, for 
storing a user data field contained within said ICS user frame, 
receiving notification by usage of a user control field or a user 
data field within the ICS user frame of the user, and being capable 
of deleting, transmitting and receiving the stored user data field. 

11. An integrated information communications system according to 
Claim 10, wherein said ICS frame database server temporarily stores 
the user data field within the ICS user frame in accordance with 
notification of usage of the ICS user frame on the side of the 
transmitting user, and transmits the stored user data field to the 
user on the receiving side at a timing notified by said user on the 
sending side using an ICS user frame. 

12. An integrated information communications system according to 
Cla&a 2 or 3, comprising as a relay network an FR network having as 
an input/output portion thereof an FR/ICS network frame converting 
unit for converting said ICS network frame into a frame relay format 
frame and for reverse conversion. 

13. An integrated information communications system according to 
Claim 2 or 3, comprising as a relay network an ATM network having as 
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the input/output field thereof an ATM/ ICS network frame converting 
unit for converting said ICS network frame into an ATM format frame 
and for reverse conversion. 

14. An integrated information communications system according to 
Claim 2 or 3, comprising as a relay network a satellite 
communications network having as the input/output portion thereof an 
satellite/ICS network frame converting unit for converting said ICS 
network frame into a satellite communications network interface and 
for reverse conversion. 

15. An integrated information communications system according to 
Claim 2 or 3. wherein said access control apparatus includes a 
telephone line converting unit or a portable telephone line 
converting unit having functions for conversion of a telephone line 
interface or a portable telephone line interface into an ICS network 
frame capable of being transferred within an ICS network, and for 
reverse conversion. 

16. ' An integrated information communications system according to 
Claim 2 or 3. wherein said access control apparatus includes an ISDN 
line converting unit having functions for conversion of an ISDN line 
interface into an ICS network frame capable of being transferred 
within an ICS network, and for reverse conversion. 



14 3 



17. An integrated information communications system according to 
Claim 2 or 3, wherein said access control apparatus includes a CATV 
line converting unit having functions for conversion of a CATV line 
interface into an ICS network frame capable of being transferred 
within an ICS network, and for reverse conversion. 

18. An integrated information communications system according to 
Claia 2 or 3, wherein said access control apparatus includes a 
satellite communications line converting unit having functions for 
conversion of a satellite communications line interface into an ICS 
network frame capable of being transferred within an ICS network, and 

:: for reverse conversion. 



19 . An integrated information communications system according to 
Claim 2 or 3. having at the relay network input/output portion within 
said access control apparatus, an FR/ICS network frame converting 
unit for converting said ICS network frame into a frame relay format 
frame and for reverse conversion. 

20. t An integrated information communications system according to 
Claim 2 or 3. having at the relay network input/output portion within 
said access control apparatus, an ATM/ ICS network frame converting 
unit for converting said ICS network frame into an ATM format frame 
and for reverse conversion. 
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21 . An integrated information communications system according to 
Claim 2 or 3. having at the relay network input/output portion within 
said access control apparatus, a satellite/ICS network frame 
converting unit for converting said ICS network frame into a 
satellite communications format frame and for reverse conversion. 

22. An integrated information communications system according to 
Claim 2 or 3. wherein said access control apparatus is included in an 
FR exchanger. 

23. An integrated information communications system according to 
Claim 2 or 3, wherein said access control apparatus is included in an 
ATM exchanger. 

24. An integrated information communications system according to 
Claim 2 or 3. wherein said access control apparatus is included in a 
satellite receiver/ transmitter . 

25** An integrated information communications system according to 
Claim 2 or 3, wherein said access control apparatus is included in 
one of the following: an X.25 network, an FR network, an ATM network 
or a satellite communications network. 

26. An integrated information communications system according to 

Claim 2 or 3, comprising: 
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at least an access control apparatus provided externally; and 
an access control apparatus governing administrative server 
provided externally; 

thereby conducting intra-corporation communication or inter- 
corporation communication. 

27. An integrated information communication system according to 
Claim 2 or 3, wherein said access control apparatus has an encryption 
and a decrryption means, the ICS user frame is converted to an 
encryption text by the encryption means and sent within an ICS to 
convert at a time of an ICS encapsulation, and the ICS user frame 
which is converted to the encryption text is retured to an original 
ICS user frame at a time of an ICS reverse encapsulation. 

28. An integrated information communication system according to 
Claim 2 or 3, wherein a speed class and a degree of priority are 
registered in the conversion table, and a communication is performed 
in accordance with the speed class and the degree of pirority. 

29. * An integrated information communication system according to 
Claim 2 or 3, wherein said access control apparatus has an electronic 
signature unit, and an electronic signature is assigned to the ICS 
user frame when the ICS user frame passed said access control 
apparatus . 
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30. An integrated information communication system; 

wherein an ICS user frame having a unique ICS user address 
system ADX is converted into an ICS network frame having an address 
system ADS. based on the administration of a conversion table 
provided within an access control apparatus; 

and wherein in the case that transmission is made over an ATM 
exchanger network contained therein following rules of said address 
system ADS. and a destination other access control apparatus is 
reached, conversion is made to said ICS user address system ADX based 
on the administration of said conversion table, and another external 
information communication apparatus is reached. 

31 An integrated information communication system according to 
Claim 30, wherein each ATM exchanger constituting said ATM exchanger 
network has an ATM address conversion table and a VC address 
conversion table. 

32 An integrated information communication system according to 
Claim 31. wherein said ATM exchanger is further connected with an ATM 
address administration server and a PVC address administration 
server . 

33. An integrated information communication system according to 
Claim 30. wherein a communication path of said ATM exchanger network 
is a SVC or a PVC. 
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34. An integrated information communication system according to 
Claim 30, wherein a communication path is a PVC, and a communication 
of 1:N, N:l or N:N is performed. 

35. An integrated information communication system; 

wherein an ICS user frame having a unique ICS user address 
system ADX is converted into an ICS network frame having an address 
system ADS. based on the administration of a conversion table 
provided within an access control apparatus; 

and wherein in the case that transmission is made over a FR 
exchanger network contained therein following rules of said address 
system ADS, and a destination other access control apparatus is " 
reached, conversion is made to said ICS user address system ADX based 
. - on the administration of said conversion table, and another external 
information communication apparatus is reached. 

36. An integrated information communication system according to 
Claim 35, wherein each FR exchanger constituting said FR exchanger 
network has a FR address conversion table and a DLC address 
convertion table. 

37. An integrated information communication system according to 
Claim 35, wherein said FR exchanger is further connected with a FR 
address administration server and a DLC address administration 
server. 
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38. An integrated information communication system according to 
Claim 2 or 3, wherein electronic signature server is connected to 
said access control apparatus or a relay apparatus, and information 
exchange is mutually performed by an ICS network server communication 
function. 

39. An integrated information communication system according to 
Claim 2 or 3, wherein an encryption server is connected to said 
access control apparatus or a relay apparatus, and information 
exchange is mutually performed by an ICS network server communication 
function. 

40. An integrated information communication system accordinjg to 
Claim 2 or 3. wherein a conversion table server shows part of said 
conversion table to a user or re-writes part of said conversion table 
corresponding to a request of the user. 

41. An integrated information communication system according to 
Clalti 2 or 3. wherein, when an address described in a network control 
field of the received ICS network frame is not registered in said 
conversion table, it is possible to select an open-zone connection or 
a closed-zone connection depending on a receipt or a waste of the ICS 
network frame by designating an open-zone class. 

42. An integrated information communication system according to 
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Claim 2 or 3. wherein said access control apparatus is separated into 
an aggregation access control apparatus and a simplified access 
control apparatus in a function, a user is connected to said 
simplified access control apparatus, said conversion table is divided 
into an aggregation conversion table within said aggregation access 
control apparatus and a simplified conversion table within the 
simplified access control apparatus, an ICS encapsulation and an ICS 
reverse encapsulation are performed in said simplified access control 
apparatus, and charging and electronic signature are performed in 
said aggregation access control apparatus. 

43. An integrated information communication system according to 
Claim 2 or 3, wherein said access control apparatus includes a 
network server such as an address administration server, name server, 
in a case which is physically independent. 
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